MSRXMSRXSecurity
Catalog 2026.10.28 · live from CISA

Exploited vulnerabilities

311 vulnerabilities attacked in the wild in the past 365 days, from CISA's catalog. Pick a product, or follow the RSS feed of new additions.

By product

No confirmed exploitation in the past year: nginx, Apache HTTP Server, Microsoft IIS, Next.js (Pages Router).

AddedNewest exploited vulnerabilitiesFix by
2026-10-28CVE-2026-46300 Linux Kernel
Linux Kernel Missing Initialization of a Variable Vulnerability
2026-10-31
2026-10-28CVE-2026-41709 Broadcom VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
2026-11-11
2026-10-27CVE-2026-48356 Adobe Commerce and Magento
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
2026-11-10
2026-10-27CVE-2026-111497 Google Brotli
Google Brotli Unchecked Return Value Vulnerability
2026-11-10
2026-10-26CVE-2026-109619 PHP Group PHP
PHP Stale Internal Request-State Vulnerability
2026-10-29
2026-10-26CVE-2026-109618 PHP Group PHP
PHP Memory Corruption Vulnerability
2026-10-29
2026-10-23CVE-2026-114625 Arista VeloCloud Orchestrator
Arista VeloCloud Orchestrator SQL Injection Vulnerability
2026-10-26
2026-10-23CVE-2026-110447 Collabora Collabora Online – Built-in CODE Server
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
2026-10-26
2026-10-20CVE-2026-96656 Plex Media Server
Plex Media Server External Control of File Name or Path Vulnerability
2026-10-23
2026-10-20CVE-2026-96655 Plex Media Server
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
2026-11-03
2026-10-20CVE-2026-96654 Plex Media Server
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
2026-10-23
2026-10-20CVE-2026-96652 Plex Media Server
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
2026-11-03
2026-10-20CVE-2026-110936 Siemens Software Center
Siemens Software Center Uncontrolled Search Path Element Vulnerability
2026-11-03
2026-10-20CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
2026-10-23
2026-10-16CVE-2026-102764 BeyondTrust Remote Support
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
2026-10-19
2026-10-16CVE-2025-61624 Fortinet Multiple Products
Fortinet Multiple Products Path Traversal Vulnerability
2026-10-19
2026-10-15CVE-2026-21589 Atlassian Multiple Products
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
2026-10-18
2026-10-14CVE-2026-76519 Cisco Secure Email Gateway
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
2026-10-17
2026-10-14CVE-2026-105134 Ahsay AhsayCBS
Ahsay AhsayCBS Command Injection Vulnerability
2026-10-17
2026-10-14CVE-2026-105133 Ahsay AhsayCBS
Ahsay AhsayCBS Improper Authentication Vulnerability
2026-10-17
2026-10-14CVE-2026-0322 Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS Code Injection Vulnerability
2026-10-17
2026-10-13CVE-2026-96951 Microsoft Windows
Microsoft Windows Command Injection Vulnerability
2026-10-16
2026-10-13CVE-2026-104935 Ivanti Connect Secure
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
2026-10-16
2026-10-08CVE-2023-22894 Strapi Strapi
Strapi Cleartext Storage of Sensitive Information Vulnerability
2026-10-11
2026-10-08CVE-2021-3199 ONLYOFFICE Docs
ONLYOFFICE Docs Server Path Traversal Vulnerability
2026-10-11