Alerts

First seen Nov 14, 11:30 PM, last seen 11:45 PM: still reported.

Reported on the status page: degraded.

Source: OVHcloud (opens in a new tab)Automatically from a public source

First seen Nov 14, 11:15 PM, last seen 11:45 PM: still reported.

Reported on the status page: degraded.

Source: DATEV (opens in a new tab)Automatically from a public source

First seen Nov 14, 08:45 PM, last seen 10:45 PM, no longer reported since 11:00 PM.

Reported on the status page: outage.

Source: GeForce NOW (opens in a new tab)Automatically from a public source

First seen Nov 14, 07:00 PM, last seen 11:15 PM, no longer reported since 11:30 PM.

Reported on the status page: degraded.

Source: Stripe (opens in a new tab)Automatically from a public source

First seen Nov 14, 06:00 PM, last seen 11:45 PM: still reported.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: DeepSeek (opens in a new tab)Automatically from a public source

First seen Nov 14, 01:45 PM, last seen 04:00 PM, no longer reported since 04:15 PM.

Reported on the status page: degraded.

Source: Fireworks AI (opens in a new tab)Automatically from a public source

First seen Nov 14, 01:45 PM, last seen 02:00 PM, no longer reported since 02:15 PM.

Reported on the status page: degraded.

Source: sipgate (opens in a new tab)Automatically from a public source

First seen Nov 14, 12:15 PM, last seen 12:15 PM, no longer reported since 12:30 PM.

Reported on the status page: degraded.

Source: orderbird (opens in a new tab)Automatically from a public source

First seen Nov 14, 08:30 AM, last seen 11:45 PM: still reported.

Reported on the status page: outage.

Source: Relevance AI (opens in a new tab)Automatically from a public source

First seen Nov 14, 08:15 AM, last seen 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Claude (opens in a new tab)Automatically from a public source

First seen Nov 14, 06:15 AM, last seen 11:45 PM: still reported.

Reported on the status page: outage.

Source: Red Hat (opens in a new tab)Automatically from a public source

First seen Nov 14, 04:30 AM, last seen 05:30 AM, no longer reported since 05:45 AM.

Reported on the status page: outage.

Source: HashiCorp Cloud (opens in a new tab)Automatically from a public source

First seen Nov 14, 04:00 AM, last seen 05:15 AM, no longer reported since 05:30 AM.

Reported on the status page: degraded.

Source: Claude (opens in a new tab)Automatically from a public source

First seen Nov 14, 04:00 AM, last seen 06:00 AM, no longer reported since 06:15 AM.

Reported on the status page: outage.

Source: Relevance AI (opens in a new tab)Automatically from a public source

First seen Nov 14, 04:00 AM, last seen 04:30 AM, no longer reported since 04:45 AM.

Reported on the status page: degraded.

Source: Stripe (opens in a new tab)Automatically from a public source

First seen Nov 14, 02:15 AM, last seen 03:45 AM, no longer reported since 04:00 AM.

Reported on the status page: outage.

Source: Maven Central (opens in a new tab)Automatically from a public source

First seen Nov 14, 01:45 AM, last seen 09:15 AM, no longer reported since 09:30 AM.

Reported on the status page: degraded.

Source: Bluesky (opens in a new tab)Automatically from a public source

First seen Nov 14, 01:45 AM, last seen 02:00 AM, no longer reported since 02:15 AM.

Reported on the status page: degraded.

Source: Tailscale (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:45 PM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: outage.

Source: Bitrise (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:15 PM, last seen 10:15 PM, no longer reported since 10:30 PM.

Reported on the status page: degraded.

Source: GitHub (opens in a new tab)Automatically from a public source

Reported as outages on the status pages. Each one is listed on its own under “Everything.”

First seen Nov 13, 08:45 PM, last seen 09:30 PM, no longer reported since 09:45 PM.

Reported on the status page: outage.

Source: ESET (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:45 PM, last seen 08:45 PM, no longer reported since 09:00 PM.

Reported on the status page: degraded.

Source: Modal (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:45 PM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: NinjaOne (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:45 PM, last seen 08:45 PM, no longer reported since 09:00 PM.

Reported on the status page: degraded.

Source: Upstash (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:00 PM, last seen 08:00 PM, no longer reported since 08:15 PM.

Reported on the status page: outage.

Source: Modrinth (opens in a new tab)Automatically from a public source

First seen Nov 13, 07:45 PM, last seen 07:45 PM, no longer reported since 08:00 PM.

Reported on the status page: degraded.

Source: Fireworks AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 05:30 PM, last seen 05:30 PM, no longer reported since 05:45 PM.

Reported on the status page: outage.

Source: Together AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 05:15 PM, last seen 06:30 PM, no longer reported since 06:45 PM.

Reported on the status page: degraded.

Source: Codecov (opens in a new tab)Automatically from a public source

First seen Nov 13, 05:00 PM, last seen 06:30 PM, no longer reported since 06:45 PM.

Reported on the status page: degraded.

Source: Bitrise (opens in a new tab)Automatically from a public source

First seen Nov 13, 05:00 PM, last seen 05:00 PM, no longer reported since 05:15 PM.

Reported on the status page: degraded.

Source: Bolt (opens in a new tab)Automatically from a public source

First seen Nov 13, 05:00 PM, last seen 06:15 PM, no longer reported since 06:30 PM.

Reported on the status page: degraded.

Source: GitHub (opens in a new tab)Automatically from a public source

First seen Nov 13, 04:30 PM, last seen 05:30 PM, no longer reported since 05:45 PM.

Reported on the status page: degraded.

Source: Kaseya (opens in a new tab)Automatically from a public source

First seen Nov 13, 04:15 PM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Barracuda (opens in a new tab)Automatically from a public source

First seen Nov 13, 04:15 PM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Paysafe (opens in a new tab)Automatically from a public source

First seen Nov 13, 03:15 PM, last seen 03:15 PM, no longer reported since 03:30 PM.

Reported on the status page: degraded.

Source: Fireworks AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:45 PM, last seen 05:00 PM, no longer reported since 05:15 PM.

Reported on the status page: outage.

Source: ESET (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:15 PM, last seen 06:30 PM, no longer reported since 06:45 PM.

Reported on the status page: degraded.

Source: CircleCI (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:00 PM, last seen Nov 14, 02:00 PM, no longer reported since Nov 14, 02:15 PM.

Reported on the status page: degraded.

Source: Infobip (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:00 PM, last seen 05:00 PM, no longer reported since 05:15 PM.

Reported on the status page: degraded.

Source: Linear (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:00 PM, last seen 01:15 PM, no longer reported since 01:30 PM.

Reported on the status page: outage.

Source: Together AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 12:45 PM, last seen 04:45 PM, no longer reported since 05:00 PM.

Reported on the status page: degraded.

Source: Brevo (opens in a new tab)Automatically from a public source

First seen Nov 13, 12:15 PM, last seen 12:45 PM, no longer reported since 01:00 PM.

Reported on the status page: degraded.

Source: Fireworks AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 12:00 PM, last seen 04:15 PM, no longer reported since 04:30 PM.

Reported on the status page: outage.

Source: Teamleader (opens in a new tab)Automatically from a public source

First seen Nov 13, 11:45 AM, last seen 05:15 PM, no longer reported since 05:30 PM.

Reported on the status page: degraded.

Source: TeamViewer (opens in a new tab)Automatically from a public source

First seen Nov 13, 11:30 AM, last seen Nov 14, 06:45 AM, no longer reported since Nov 14, 07:00 AM.

Reported on the status page: degraded.

Source: Netlify (opens in a new tab)Automatically from a public source

First seen Nov 13, 11:15 AM, last seen 11:00 PM, no longer reported since 11:15 PM.

Reported on the status page: degraded.

Source: Asana (opens in a new tab)Automatically from a public source

First seen Nov 13, 11:15 AM, last seen Nov 14, 11:00 AM, no longer reported since Nov 14, 11:15 AM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: manitu (opens in a new tab)Automatically from a public source

First seen Nov 13, 10:15 AM, last seen 01:45 PM, no longer reported since 02:00 PM.

Reported on the status page: outage.

Source: Paysafe (opens in a new tab)Automatically from a public source

First seen Nov 13, 10:00 AM, last seen 07:15 PM, no longer reported since 07:30 PM.

Reported on the status page: degraded.

Source: Unzer (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:45 AM, last seen Nov 14, 01:00 AM, no longer reported since Nov 14, 01:15 AM.

Reported on the status page: degraded.

Source: Help Scout (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:45 AM, last seen 07:45 PM, no longer reported since 08:00 PM.

Reported on the status page: degraded.

Source: Planday (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:30 AM, last seen 10:00 AM, no longer reported since 10:15 AM.

Reported on the status page: degraded.

Source: Hugging Face (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:30 AM, last seen 03:15 PM, no longer reported since 03:30 PM.

Reported on the status page: degraded.

Source: Langdock (opens in a new tab)Automatically from a public source

First seen Nov 13, 09:00 AM, last seen 09:00 AM, no longer reported since 09:15 AM.

Reported on the status page: degraded.

Source: orderbird (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:45 AM, last seen Nov 14, 08:00 AM, no longer reported since Nov 14, 08:15 AM.

Reported on the status page: degraded.

Source: Bitdefender GravityZone (opens in a new tab)Automatically from a public source

First seen Nov 13, 08:45 AM, last seen Nov 14, 01:45 PM, no longer reported since Nov 14, 02:00 PM.

Reported on the status page: degraded.

Source: Chargebee (opens in a new tab)Automatically from a public source

First seen Nov 13, 07:45 AM, last seen 08:15 AM, no longer reported since 08:30 AM.

Reported on the status page: outage.

Source: Maven Central (opens in a new tab)Automatically from a public source

First seen Nov 13, 07:15 AM, last seen Nov 14, 07:00 AM, no longer reported since Nov 14, 07:15 AM.

Reported on the status page: degraded.

Source: Jira (opens in a new tab)Automatically from a public source

First seen Nov 13, 06:00 AM, last seen 09:15 PM, no longer reported since 09:30 PM.

Reported on the status page: degraded.

Source: DigiCert (opens in a new tab)Automatically from a public source

First seen Nov 13, 04:15 AM, last seen 06:45 AM, no longer reported since 07:00 AM.

Reported on the status page: degraded.

Source: HeyGen (opens in a new tab)Automatically from a public source

First seen Nov 13, 03:15 AM, last seen Nov 14, 05:45 AM, no longer reported since Nov 14, 06:00 AM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: HRworks (opens in a new tab)Automatically from a public source

First seen Nov 13, 03:15 AM, last seen 03:15 AM, no longer reported since 03:30 AM.

Reported on the status page: degraded.

Source: orderbird (opens in a new tab)Automatically from a public source

First seen Nov 13, 03:00 AM, last seen 03:00 AM, no longer reported since 03:15 AM.

Reported on the status page: outage.

Source: Shopware (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:15 AM, last seen 06:00 PM, no longer reported since 06:15 PM.

Reported on the status page: degraded.

Source: Pantheon (opens in a new tab)Automatically from a public source

First seen Nov 13, 02:00 AM, last seen 02:30 AM, no longer reported since 02:45 AM.

Reported on the status page: degraded.

Source: Fireworks AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Akamai (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: outage.

Source: Bitpanda (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 01:45 AM, no longer reported since 02:00 AM.

Reported on the status page: degraded.

Source: Buildkite (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 10:30 PM, no longer reported since 10:45 PM.

Reported on the status page: degraded.

Source: Calendly (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: ChatGPT (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 10:45 PM, no longer reported since 11:00 PM.

Reported on the status page: degraded.

Source: Claude (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Cloudflare (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: outage.

Source: Elastic Cloud (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 04:30 AM, no longer reported since 04:45 AM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: Ghost (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 07:15 AM, no longer reported since Nov 14, 07:30 AM.

Reported on the status page: outage.

Source: GoDaddy (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: Hetzner (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 03:45 PM, no longer reported since Nov 14, 04:00 PM.

Reported on the status page: outage.

Source: Host Europe (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 07:15 PM, no longer reported since 07:30 PM.

Reported on the status page: degraded.

Source: HubSpot (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: IONOS Cloud (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 04:15 PM, no longer reported since 04:30 PM.

Reported on the status page: degraded.

Source: Klarna (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 11:30 PM, no longer reported since 11:45 PM.

Reported on the status page: degraded.

Source: KnowBe4 (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Kraken (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 07:00 PM, no longer reported since 07:15 PM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: Lemon Squeezy (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 02:00 AM, no longer reported since 02:15 AM.

Reported on the status page: degraded.

Source: Lightspeed (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 09:00 AM, no longer reported since 09:15 AM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: mailbox.org (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: mastodon.social (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 03:30 PM, no longer reported since 03:45 PM.

Reported on the status page: degraded.

Source: monday.com (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:15 PM, no longer reported since Nov 14, 11:30 PM.

The status page has an entry from the last 24 hours. Only the status page says whether it’s an outage, maintenance or a notice.

Source: N-able (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Northflank (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 10:00 PM, no longer reported since 10:15 PM.

Reported on the status page: degraded.

Source: Notion (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Optimizely (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 01:45 AM, no longer reported since 02:00 AM.

Reported on the status page: degraded.

Source: OVHcloud (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: PayPal (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 08:00 PM, no longer reported since Nov 14, 08:15 PM.

Reported on the status page: degraded.

Source: Procore (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 10:45 PM, no longer reported since 11:00 PM.

Reported on the status page: outage.

Source: Relevance AI (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 08:15 PM, no longer reported since 08:30 PM.

Reported on the status page: degraded.

Source: Resend (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Sage (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Scaleway (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Sinch (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 05:15 PM, no longer reported since 05:30 PM.

Reported on the status page: degraded.

Source: SparkPost (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: outage.

Source: Telnyx (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 07:45 AM, no longer reported since Nov 14, 08:00 AM.

Reported on the status page: outage.

Source: Todoist (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:45 PM: still reported.

Reported on the status page: degraded.

Source: Twilio (SendGrid) (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen 02:15 AM, no longer reported since 02:30 AM.

Reported on the status page: degraded.

Source: WorkOS (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 11:30 PM, no longer reported since Nov 14, 11:45 PM.

Reported on the status page: degraded.

Source: Xero (opens in a new tab)Automatically from a public source

First seen Nov 13, 01:45 AM, last seen Nov 14, 09:45 AM, no longer reported since Nov 14, 10:00 AM.

Reported on the status page: degraded.

Source: Zoom (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 13, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-123039 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Check Point products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 13, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-114713 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates UnrealIRCd for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

From SW labs, applies from Nov 12, 2026 to Dec 31, 2027.

How to applyWritten by SW labs

From SW labs, applies from Nov 12, 2026 to Dec 31, 2027.

How it worksWritten by SW labs

From SW labs, applies from Nov 12, 2026 to Dec 31, 2027.

When you earnWritten by SW labs

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Nov 10, 2026. In the banner since Nov 10, 2026, until Nov 15, 2026 (five days from being added).

Reported as exploited: attackers are already using the flaw.

CVE-2026-125350 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Chrome and other Chromium browsers for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-124194 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Office for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-116606 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Barracuda Email Security Gateway (ESG) for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-111560 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Barracuda Networks products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20320 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco BroadWorks for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-111793 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Openwave Messaging Webtop Media Transcoder for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-102895 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates GPUStack for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-123218 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates IBM Aspera Faspex for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-123158 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates OpenBSD OpenSSH for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-116779 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SignalWire FreeSwitch for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 6, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-19868 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SonicWall SonicOS SSLVPN for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2024-27834 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Apple devices and apps for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Nov 3, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-119977 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates WordPress Core for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 30, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-118527 (opens in a new tab), CVE-2026-111357 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ivanti Connect Secure for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 29, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-76418 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Secure Firewall ASA Software and Cisco Secure FTD Software for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 29, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-97229 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates GitLab Community Edition and Enterprise Edition for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 28, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-46300 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Linux kernel for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 28, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-41709 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates VMware ESX for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48356 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Adobe Commerce and Magento for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-111497 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Google Brotli for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-109618 (opens in a new tab), CVE-2026-109619 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates PHP for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 23, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-114625 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Arista VeloCloud Orchestrator for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 23, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-110447 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Collabora Online – Built-in CODE Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Oracle (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Oct 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-106931 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates EG Secure Solutions SiteGuard Server Edition for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-96656 (opens in a new tab), CVE-2026-96655 (opens in a new tab), CVE-2026-96654 (opens in a new tab), CVE-2026-96652 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Plex Media Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-110936 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Siemens Software Center for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-61624 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Fortinet products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-102764 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates BeyondTrust Remote Support for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-21589 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Atlassian products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-0322 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Palo Alto Networks PAN-OS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-105134 (opens in a new tab), CVE-2026-105133 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates AhsayCBS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-76519 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Secure Email Gateway for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Oct 13, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-104935 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ivanti Connect Secure for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 13, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-96951 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Windows for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2016-3081 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Apache Struts for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2015-5477 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates ISC BIND for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2021-3199 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates ONLYOFFICE Docs for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2015-3306 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates ProFTPD for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2023-22894 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Strapi for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-88779 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Citrix NetScaler for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-102490 (opens in a new tab), CVE-2026-102489 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Zammad for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Oct 1, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-104286 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Fortinet FortiMail for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 30, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-76504 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Catalyst SD-WAN Manager for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 29, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-86950 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Apple devices and apps for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-88772 (opens in a new tab), CVE-2026-88771 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Citrix NetScaler for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 25, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-65660 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 25, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-67279 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates MikroTik RouterOS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 25, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-87902 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates WordPress Core for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Sep 25, 2026.

Reported as exploited: attackers are already using the flaw.

EUVD-2026-75010

What to do: Ask whoever updates Check Point Quantum Security Gateway for you whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 24, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-71362 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Adobe Commerce and Magento for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 24, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-5430 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected WSO2 products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-93952 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Arista VeloCloud Orchestrator for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-93616 (opens in a new tab), CVE-2026-85102 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Check Point products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-94127 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates F5 BIG-IP APM for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-7273 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Zyxel products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 18, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-39964 (opens in a new tab), CVE-2026-53266 (opens in a new tab), CVE-2025-39682 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Linux kernel for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-58704 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Pixel phones for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-87886 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Acronis Backup for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-76460 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Identity Services Engine for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-76461 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Secure Email Gateway for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-84869 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates ConnectWise ScreenConnect for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-85706 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates GitLab Community Edition and Enterprise Edition for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-42016 (opens in a new tab), CVE-2026-42018 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates JFrog Artifactory for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-86060 (opens in a new tab), CVE-2026-67277 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates MikroTik RouterOS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20079 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-19490 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Citrix NetScaler for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-25249 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the affected Fortinet products for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-87491 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Chrome and other Chromium browsers for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Sep 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-81963 (opens in a new tab), CVE-2026-85880 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Windows for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-75650 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Adobe Commerce and Magento for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-86218 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates N-able N-central for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Sep 5, 2026.

Reported as exploited: attackers are already using the flaw.

EUVD-2026-72024

What to do: Ask whoever updates MikroTik RouterOS for you whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-85046 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Chrome and other Chromium browsers for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-83548 (opens in a new tab), CVE-2026-83549 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SonicWall SMA1000 Appliances for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-59822 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates BerriAI LiteLLM for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

EUVD-2026-70645, EUVD-2026-70647

What to do: Ask whoever updates core-geonetwork for you whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-82329 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates JFrog Artifactory for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-49869 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Kestra OSS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48710 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Kludex Starlette for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Sep 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-9586 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Sangoma Switchvox for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 31, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-82078 (opens in a new tab), CVE-2026-81578 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates PaperCut NG/MF for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-53362 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Linux kernel for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-66384 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates JFrog Artifactory for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2023-49105 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates ownCloud for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Aug 27, 2026.

Reported as exploited: attackers are already using the flaw. ENISA doesn’t name a vendor, only the label “WE826-WD.”

EUVD-2026-67000

What to do: Check whether you run anything labeled “WE826-WD.” If you do, ask whoever looks after it whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Aug 27, 2026.

Reported as exploited: attackers are already using the flaw. ENISA doesn’t name a vendor, only the label “ZBT-ZBT7621.”

EUVD-2026-66999

What to do: Check whether you run anything labeled “ZBT-ZBT7621.” If you do, ask whoever looks after it whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-8452 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Citrix NetScaler ADC and NetScaler Gateway for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2022-0995 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Linux kernel for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2021-23758 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ajax.NET Professional for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2019-1068 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SQL Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2015-5287 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Red Hat Automatic Bug Reporting Tool for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2015-3246 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Red Hat Libuser for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 25, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-60004 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Gitea for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 24, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-21962 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates HTTP Server and Oracle Weblogic Server Proxy Plug-in for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-73570 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Zimbra Collaboration Suite (ZCS) for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Aug 21, 2026.

Reported as exploited: attackers are already using the flaw.

EUVD-2026-63693

What to do: Ask whoever updates Microsoft Entra for you whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-72530 (opens in a new tab), CVE-2026-72529 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates TrueConf Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 19, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-64849 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates MLflow for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 18, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-65400 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Apple macOS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 18, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-55040 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 18, 2026.

Reported as exploited, also in ransomware.

CVE-2026-59310 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates VMware vCenter for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 18, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-33824 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Internet Key Exchange (IKE) Service Extensions for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 17, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-62593 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ray for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Aug 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20349 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-68820 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Windows for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-72898 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Metabase for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 7, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-8037 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Progress LoadMaster for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 5, 2026.

Reported as exploited, also in ransomware.

CVE-2026-63077 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates JetBrains TeamCity for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-34486 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Apache Tomcat for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-9198 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates IBM Langflow for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 4, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-18556 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates N-able N-central for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Aug 3, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-18577 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates N-able N-central for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 29, 2026.

Reported as exploited, also in ransomware.

CVE-2026-20316 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Secure Firewall Management Center (FMC) for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-68686 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Fortinet FortiOS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-16812 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Arista VeloCloud Orchestrator for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-50522 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-16232 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Check Point SmartConsole for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Oracle (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Jul 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-60137 (opens in a new tab), CVE-2026-63030 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates WordPress Core for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2021-27137 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates DD-WRT for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-0770 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Langflow for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-58644 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-25089 (opens in a new tab), CVE-2026-39808 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Fortinet FortiSandbox for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2023-4346 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates KNX Protocol Connection Authorization Option 1 for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-46817 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Oracle E-Business Suite for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Jul 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-56164 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 14, 2026.

Reported as exploited, also in ransomware.

CVE-2026-15409 (opens in a new tab), CVE-2026-15410 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SonicWall SMA1000 Appliances for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 14, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-56155 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Active Directory Federation Services for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 13, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2008-4128 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco IOS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-56291 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Balbooa Forms for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 10, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48939 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates iCagenda for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by ENISA on Jul 10, 2026.

Reported as exploited: attackers are already using the flaw.

EUVD-2026-40122

What to do: Ask whoever updates joomshaper.com Helix3 extension for Joomla for you whether the update is installed. The linked advisory is what counts.

Source: ENISA EUVD (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 7, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48282 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Adobe ColdFusion for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 7, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-56290 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Joomlack Page Builder for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 7, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48908 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates JoomShaper SP Page Builder for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 7, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-55255 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Langflow for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jul 1, 2026.

Reported as exploited, also in ransomware.

CVE-2026-45659 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft SharePoint Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 29, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48558 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SimpleHelp for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 25, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20230 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Unified Communications Manager for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 25, 2026.

Reported as exploited, also in ransomware.

CVE-2026-12569 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates PTC Windchill and FlexPLM for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 23, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-67038 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Lantronix EDS5000 for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 23, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-34910 (opens in a new tab), CVE-2026-34909 (opens in a new tab), CVE-2026-34908 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ubiquiti UniFi OS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 18, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20253 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Splunk Enterprise for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 16, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48907 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Widget Factory Joomla Content Editor for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20262 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Catalyst SD-WAN Manager for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-54420 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates LiteSpeed cPanel Plugin for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 12, 2026.

Reported as exploited, also in ransomware.

CVE-2026-35273 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Oracle PeopleSoft Enterprise PeopleTools for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 11, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-10520 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Ivanti Sentry for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Fixed date from the vendors’ calendar, not a finding.

What to do: In the days after, check that the updates are installed.

Source: Microsoft (opens in a new tab)Calculated from the vendors’ calendar

Added as exploited by CISA on Jun 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-11645 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Chrome and other Chromium browsers for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-7473 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Arista Extensible Operating System for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 9, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-20245 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Cisco Catalyst SD-WAN Manager for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 8, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-42271 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates BerriAI LiteLLM for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 8, 2026.

Reported as exploited, also in ransomware.

CVE-2026-50751 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Check Point Security Gateway for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 5, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-28318 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates SolarWinds Serv-U for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 3, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-45247 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Mirasvit Full Page Cache Warmer for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-48595 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Android for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 2, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2022-0492 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates the Linux kernel for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on Jun 1, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2024-21182 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Oracle WebLogic Server for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 29, 2026.

Reported as exploited, also in ransomware.

CVE-2026-0257 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Palo Alto Networks PAN-OS for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 27, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-8398 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Daemon Tools Lite for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 27, 2026.

Reported as exploited, also in ransomware.

CVE-2026-48027 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Nx Console for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 27, 2026.

Reported as exploited, also in ransomware.

CVE-2026-45321 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates TanStack for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 26, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-48172 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates LiteSpeed cPanel Plugin for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 22, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-9082 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Drupal Core for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2025-34291 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Langflow for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 21, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-34926 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Trend Micro Apex One for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2009-3459 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Adobe Acrobat and Reader for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2008-4250 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Windows for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-41091 (opens in a new tab), CVE-2026-45498 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Defender for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2009-1537 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft DirectX for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 20, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2010-0249 (opens in a new tab), CVE-2010-0806 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft Internet Explorer for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source

Added as exploited by CISA on May 15, 2026.

Reported as exploited: attackers are already using the flaw.

CVE-2026-42897 (opens in a new tab) (details at NVD)

What to do: Ask whoever updates Microsoft for you whether the update is installed. The linked advisory is what counts.

Source: CISA KEV (opens in a new tab)Automatically from a public source