securitytabs

Vulnerabilities

CVEs in the news, ranked by exploitation signal. Facts from NVD, FIRST, and CISA.

  1. CVE-2024-47575Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate ImplantCritical9.8KEVEPSS 94.8%1 src
  2. CVE-2026-76504Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Critical9.8KEVEPSS 1.8%1 src
  3. CVE-2026-76519SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect SecureCritical9.8KEVEPSS 1.6%2 src
  4. CVE-2026-88772Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)Critical9.5KEVEPSS 1.3%1 src
  5. CVE-2026-88771Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Critical9.5KEVEPSS 1.1%2 src
  6. CVE-2026-21589CISA Adds One Known Exploited Vulnerability to CatalogCritical9.3KEVEPSS 12.7%2 src
  7. CVE-2026-105134AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete PatchesCritical9.3KEVEPSS 4.8%2 src
  8. CVE-2026-102764CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildCritical9.3KEVEPSS 1.2%3 src
  9. CVE-2026-34197Hitachi Energy SOIHigh8.8KEVEPSS 15.5%1 src
  10. CVE-2026-96951Patch Tuesday - October 2026High8.8KEVEPSS 1.5%2 src
  11. CVE-2026-88779Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779High8.7KEVEPSS 0.6%1 src
  12. CVE-2026-104935Ivanti ICS Zero-Day Attacks Highlight Vendor Patching HurdlesHigh8.6KEVEPSS 26.0%3 src
  13. CVE-2026-0322SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect SecureHigh8.6KEVEPSS 1.2%3 src
  14. CVE-2026-96656CISA Adds Six Known Exploited Vulnerabilities to CatalogHigh8.6KEVEPSS 0.4%1 src
  15. CVE-2026-106931CISA Adds Six Known Exploited Vulnerabilities to CatalogHigh8.5KEVEPSS 0.7%1 src
  16. CVE-2026-110936CISA Adds Six Known Exploited Vulnerabilities to CatalogHigh8.4KEVEPSS 0.1%2 src
  17. CVE-2026-0257Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 20)High7.8KEVEPSS 96.9%3 src
  18. CVE-2026-96654CISA Adds Six Known Exploited Vulnerabilities to CatalogMedium6.9KEVEPSS 0.2%1 src
  19. CVE-2025-61624CISA Adds Two Known Exploited Vulnerabilities to CatalogMedium6.5KEVEPSS 1.1%2 src
  20. CVE-2026-105133AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete PatchesMedium5.5KEVEPSS 0.9%2 src
  21. CVE-2026-96655CISA Adds Six Known Exploited Vulnerabilities to CatalogMedium5.3KEVEPSS 0.2%1 src
  22. CVE-2026-96652CISA Adds Six Known Exploited Vulnerabilities to CatalogMedium5.3KEVEPSS 0.2%1 src
  23. CVE-2026-97229Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Critical10.0EPSS 0.5%2 src
  24. CVE-2026-105740Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit AttemptsCritical9.9EPSS 0.6%1 src
  25. CVE-2025-54957A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window OpensCritical9.8EPSS 1.6%1 src
  26. CVE-2026-108065Unauthenticated SQL Injection In Channel Software WebAlliance eCommerceCritical9.8EPSS 0.8%1 src
  27. CVE-2026-11856Hitachi Energy RTU500 ProductCritical9.8EPSS 0.7%1 src
  28. CVE-2026-9079Hitachi Energy RTU500 ProductCritical9.8EPSS 0.6%1 src
  29. CVE-2026-106173Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionCritical9.8EPSS 0.4%1 src
  30. CVE-2026-101767SANS Stormcast Wednesday, October 21st, 2026: eMudhra Intermediate CA Certificates Revoked; Critical PHP Security Release; Oracle CPU E-Business Suite SQLi (CVE-2026-101767); FortiSIEM gRPC RCE PoCCritical9.81 src
  31. CVE-2026-105445SANS Stormcast Thursday, October 15th, 2026: Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP/2 RCECritical9.4EPSS 0.4%1 src
  32. CVE-2026-100730Grid Protection Alliance openPDC and openHistorianCritical9.3EPSS 0.6%1 src
  33. CVE-2026-15340Savannah lwIP SMTP clientCritical9.3EPSS 0.6%1 src
  34. CVE-2026-105278Grid Protection Alliance openPDC and openHistorianCritical9.3EPSS 0.3%1 src
  35. CVE-2026-107617Guangzhou Juan IoT Technology EseeCloudCritical9.3EPSS 0.3%1 src
  36. CVE-2026-39460Red Lion Controls N-Tron 700 Series (Update A)Critical9.3EPSS 0.3%1 src
  37. CVE-2026-33367Red Lion Controls N-Tron 700 Series (Update A)Critical9.3EPSS 0.3%1 src
  38. CVE-2026-105279J4Care dcm4cheCritical9.3EPSS 0.2%1 src
  39. CVE-2026-28745Red Lion Controls N-Tron 700 Series (Update A)Critical9.3EPSS 0.2%1 src
  40. CVE-2026-99999Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host MemoryCritical9.3EPSS 0.2%1 src
  41. CVE-2026-32645Red Lion Controls N-Tron 700 Series (Update A)Critical9.2EPSS 0.1%1 src
  42. CVE-2026-60007Eclipse Foundation Eclipse MiloCritical9.1EPSS 0.6%1 src
  43. CVE-2026-8927Hitachi Energy RTU500 ProductCritical9.1EPSS 0.5%1 src
  44. CVE-2026-58080Eclipse Foundation Eclipse MiloHigh8.8EPSS 0.4%1 src
  45. CVE-2026-97851J4Care dcm4cheHigh8.8EPSS 0.3%1 src
  46. CVE-2026-63252Eclipse Foundation Eclipse MiloHigh8.7EPSS 0.6%1 src
  47. CVE-2026-92817Inductive Automation Ignition SoftwareHigh8.7EPSS 0.5%1 src
  48. CVE-2026-62927Eclipse Foundation Eclipse MiloHigh8.7EPSS 0.4%1 src
  49. CVE-2026-101021J4Care dcm4cheHigh8.7EPSS 0.3%1 src
  50. CVE-2026-107621J4Care dcm4cheHigh8.7EPSS 0.3%1 src
  51. CVE-2026-105273J4Care dcm4cheHigh8.7EPSS 0.3%1 src
  52. CVE-2026-105281Grid Protection Alliance openPDC and openHistorianHigh8.7EPSS 0.3%1 src
  53. CVE-2026-105667J4Care dcm4cheHigh8.7EPSS 0.2%1 src
  54. CVE-2026-109813Moxa AIG-302 ThingsPro EdgeHigh8.6EPSS 0.2%1 src
  55. CVE-2026-105269Satel Netco DesignHigh8.5EPSS 0.4%1 src
  56. CVE-2026-39453Red Lion Controls N-Tron 700 Series (Update A)High8.5EPSS 0.3%1 src
  57. CVE-2026-7395Hitachi Energy Asset SuiteHigh8.5EPSS 0.2%1 src
  58. CVE-2026-9854Hitachi Energy MicroSCADA X SYS600 ProductHigh8.5EPSS 0.1%1 src
  59. CVE-2026-9853Hitachi Energy MicroSCADA X SYS600 ProductHigh8.5EPSS 0.1%1 src
  60. CVE-2026-29797Red Lion Controls N-Tron 700 Series (Update A)High8.4EPSS 0.2%1 src