Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Live feed
Requires attention
High-severity developments with a clear action (patch, mitigate or act now), newest first.
CISA Adds Six Known Exploited Vulnerabilities to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Plex Media Server External Control of File Name or Path Vulnerability (CVE-2026-96656) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability (CVE-2026-106931) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
#StopRansomware: SafePay Ransomware
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Hitachi Energy RTU500 Product
Severity: CriticalAction: Mitigate
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 (Updated October 19)
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
F5 releases out-of-band patches for critical NGINX vulnerabilities
Severity: HighAction: Patch
Drupal patches critical RCE flaws, warns exploits may emerge soon
Severity: HighAction: Patch
F5, Juniper Networks Patch Critical Vulnerabilities
Severity: HighAction: Patch
Microsoft Patches Two Dozen RCE Flaws in Office
Severity: HighAction: Patch
BeyondTrust patches zero-day exploited in attacks since August
Severity: CriticalAction: Act nowExploitation: Exploited
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Severity: CriticalAction: Act nowExploitation: Exploited
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
Severity: CriticalAction: Act nowExploitation: Exploited
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
Severity: HighAction: PatchExploitation: Exploited
Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Severity: HighAction: Patch
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Extended Stable Update for Desktop
Severity: CriticalAction: Patch
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Severity: CriticalAction: Act nowExploitation: Exploited
Ivanti warns of Connect Secure zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
SAP warns of maximum severity OAuth2 SSRF security flaw
Severity: HighAction: Patch
Microsoft Windows Command Injection Vulnerability (CVE-2026-96951) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV