Extended Stable Update for Desktop
Severity: CriticalAction: Patch
Live feed
Requires attention
High-severity developments with a clear action (patch, mitigate or act now), newest first.
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Severity: CriticalAction: Act nowExploitation: Exploited
Ivanti warns of Connect Secure zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
SAP warns of maximum severity OAuth2 SSRF security flaw
Severity: HighAction: Patch
Microsoft Windows Command Injection Vulnerability (CVE-2026-96951) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
GitLab warns of max severity code execution vulnerability
Severity: HighAction: Patch
Critical SonicWall Vulnerability Exploited Days After Disclosure
Severity: CriticalAction: Patch
Stable Channel Update for ChromeOS / ChromeOS Flex
Severity: CriticalAction: Patch
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Severity: HighAction: MitigateExploitation: Exploited
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Citrix warns admins to patch new NetScaler RCE flaw immediately
Severity: HighAction: Patch
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Severity: CriticalAction: Patch
Cisco Patches a Dozen Critical Vulnerabilities
Severity: HighAction: Patch
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
ProFTPD Improper Access Control Vulnerability (CVE-2015-3306) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
ONLYOFFICE Docs Server Path Traversal Vulnerability (CVE-2021-3199) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Strapi Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-22894) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Apache Struts Command Injection Vulnerability (CVE-2016-3081) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
ISC BIND Data Processing Errors Vulnerability (CVE-2015-5477) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Long Term Support Channel Update for ChromeOS
Severity: CriticalAction: Patch
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
Severity: CriticalAction: Act nowExploitation: Exploited
Atlassian Patches Critical Vulnerability Affecting 8 Products
Severity: HighAction: Patch
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Hitachi Energy SOI
Severity: HighAction: MitigateExploitation: ExploitedCISA KEV
Hitachi Energy Asset Suite
Severity: HighAction: Mitigate
Hitachi Energy REB500
Severity: HighAction: Mitigate
New Dell System Update flaw lets hackers gain root privileges
Severity: HighAction: Patch
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV