Fortra Patches Critical Vulnerabilities in BoKS
Severity: HighAction: Patch
Live feed
Requires attention
High-severity developments with a clear action (patch, mitigate or act now), newest first.
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
Severity: HighAction: PatchExploitation: Suspected
GitLab warns of critical RCE vulnerability in AI Gateway service
Severity: HighAction: Patch
Dell asks admins to patch max severity CSM flaws as soon as possible
Severity: HighAction: Patch
Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
Severity: HighAction: Patch
Fortinet FortiMail Path Traversal Vulnerability (CVE-2026-104286) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Armatura LLC Armatura One
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Cisco warns of new SD-WAN zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Kiteworks patches critical flaw, brings customer systems online
Severity: HighAction: Patch
Apple patches CoreGraphics zero-day flaw exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Eufy Omni C20, Omni X10 Pro
Severity: CriticalAction: Patch
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
lwIP (Lightweight IP)
Severity: HighAction: Mitigate
Siemens Siveillance Control
Severity: HighAction: Patch
Siemens SIPLUS and SIMATIC Products
Severity: HighAction: PatchExploitation: ExploitedCISA KEV