Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-111357 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | 30 Oct 2026 |
| CVE-2026-118527 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | 30 Oct 2026 |
| CVE-2026-97229 Exploited |
Not yet scored | GitLab Community Edition and Enterprise Edition Operating systems & software |
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 29 Oct 2026 |
| CVE-2026-76418 Exploited |
Not yet scored | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Network & security devices |
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 29 Oct 2026 |
| CVE-2026-41709 Exploited |
Not yet scored | Broadcom VMware ESX Operating systems & software |
Broadcom VMWare ESX Insufficient Logging Vulnerability | 28 Oct 2026 |
| CVE-2026-46300 Exploited |
Not yet scored | Linux Kernel Applications & supply chain |
Linux Kernel Missing Initialization of a Variable Vulnerability | 28 Oct 2026 |
| CVE-2026-111497 Exploited |
Not yet scored | Google Brotli Operating systems & software |
Google Brotli Unchecked Return Value Vulnerability | 27 Oct 2026 |
| CVE-2026-48356 Exploited |
Not yet scored | Adobe Commerce and Magento Operating systems & software |
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 27 Oct 2026 |
| CVE-2026-109618 Exploited |
Not yet scored | PHP Group PHP Applications & supply chain |
PHP Memory Corruption Vulnerability | 26 Oct 2026 |
| CVE-2026-109619 Exploited |
Not yet scored | PHP Group PHP Applications & supply chain |
PHP Stale Internal Request-State Vulnerability | 26 Oct 2026 |
| CVE-2026-114625 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Applications & supply chain |
Arista VeloCloud Orchestrator SQL Injection Vulnerability | 23 Oct 2026 |
| CVE-2026-110447 Exploited |
Not yet scored | Collabora Collabora Online – Built-in CODE Server Operating systems & software |
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability | 23 Oct 2026 |
| CVE-2026-96655 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2026 |
| CVE-2026-106931 Exploited |
Not yet scored | EG Secure Solutions SiteGuard Server Edition Operating systems & software |
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 20 Oct 2026 |
| CVE-2026-96656 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server External Control of File Name or Path Vulnerability | 20 Oct 2026 |
| CVE-2026-96652 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2026 |
| CVE-2026-110936 Exploited |
Not yet scored | Siemens Software Center OT, ICS & IoT |
Siemens Software Center Uncontrolled Search Path Element Vulnerability | 20 Oct 2026 |
| CVE-2026-96654 Exploited |
Not yet scored | Plex Media Server Applications & supply chain |
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 20 Oct 2026 |
| CVE-2026-102764 Exploited |
Not yet scored | BeyondTrust Remote Support Operating systems & software |
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 16 Oct 2026 |
| CVE-2025-61624 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Path Traversal Vulnerability | 16 Oct 2026 |
| CVE-2026-21589 Exploited |
Not yet scored | Atlassian Multiple Products Applications & supply chain |
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 15 Oct 2026 |
| CVE-2026-76519 Exploited |
Not yet scored | Cisco Secure Email Gateway Network & security devices |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 14 Oct 2026 |
| CVE-2026-105133 Exploited |
Not yet scored | Ahsay AhsayCBS Applications & supply chain |
Ahsay AhsayCBS Improper Authentication Vulnerability | 14 Oct 2026 |
| CVE-2026-0322 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Code Injection Vulnerability | 14 Oct 2026 |
| CVE-2026-105134 Exploited |
Not yet scored | Ahsay AhsayCBS Applications & supply chain |
Ahsay AhsayCBS Command Injection Vulnerability | 14 Oct 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.