TM · Trademark pendingToday's vulnerabilities
Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.
- Auto-updated hourly · last updated 11/14/2026, 09:18
- 194 total
- 52 exploited
- Critical 26
- High 124
- Pending 44
- Exploited in the wildCritical · CVSS 9.8CVE-2026-102895
GPUStack GPUStack, pip:gpustack
A vulnerability in GPUStack GPUStack, pip:gpustack is being exploited in the wild. Apply the vendor's security update now.
- Affects
- GPUStack GPUStack, pip:gpustack
- Published
- 2026-11-09
- US federal due date
- 2026-11-12
- Exploited in the wildHighCVE-2026-114713
UnrealIRCd UnrealIRCd
A vulnerability in UnrealIRCd UnrealIRCd is being exploited in the wild. Apply the vendor's security update now.
- Affects
- UnrealIRCd UnrealIRCd
- Published
- 2026-11-13
- US federal due date
- 2026-11-16
- Exploited in the wildHighCVE-2026-123039
Check Point Multiple Products
A vulnerability in Check Point Multiple Products is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Check Point Multiple Products
- Published
- 2026-11-13
- US federal due date
- 2026-11-16
- Exploited in the wildHighCVE-2026-124194
Microsoft Office
A vulnerability in Microsoft Office is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Microsoft Office
- Published
- 2026-11-10
- US federal due date
- 2026-11-24
- Exploited in the wildHighCVE-2026-111793
Openwave Messaging Limited Webtop Media Transcoder
A vulnerability in Openwave Messaging Limited Webtop Media Transcoder is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Openwave Messaging Limited Webtop Media Transcoder
- Published
- 2026-11-10
- US federal due date
- 2026-11-24
Cisco BroadWorks
A vulnerability in Cisco BroadWorks is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Cisco BroadWorks
- Published
- 2026-11-10
- US federal due date
- 2026-11-24
- Exploited in the wildHighCVE-2026-111560
Barracuda Networks Multiple Products
A vulnerability in Barracuda Networks Multiple Products is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Barracuda Networks Multiple Products
- Published
- 2026-11-10
- US federal due date
- 2026-11-13
- Exploited in the wildHighCVE-2026-116606
Barracuda Networks Barracuda Email Security Gateway (ESG)
A vulnerability in Barracuda Networks Barracuda Email Security Gateway (ESG) is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Barracuda Networks Barracuda Email Security Gateway (ESG)
- Published
- 2026-11-10
- US federal due date
- 2026-11-13
Google Chromium
A vulnerability in Google Chromium is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Google Chromium
- Published
- 2026-11-10
- US federal due date
- 2026-11-24
- Exploited in the wildHighCVE-2026-123158
OpenBSD OpenSSH
A vulnerability in OpenBSD OpenSSH is being exploited in the wild. Apply the vendor's security update now.
- Affects
- OpenBSD OpenSSH
- Published
- 2026-11-09
- US federal due date
- 2026-11-12
- Exploited in the wildHighCVE-2026-116779
SignalWire FreeSwitch
A vulnerability in SignalWire FreeSwitch is being exploited in the wild. Apply the vendor's security update now.
- Affects
- SignalWire FreeSwitch
- Published
- 2026-11-09
- US federal due date
- 2026-11-12
- Exploited in the wildHighCVE-2026-123218
IBM Aspera Faspex
A vulnerability in IBM Aspera Faspex is being exploited in the wild. Apply the vendor's security update now.
- Affects
- IBM Aspera Faspex
- Published
- 2026-11-09
- US federal due date
- 2026-11-12
SonicWall SonicOS SSLVPN
A vulnerability in SonicWall SonicOS SSLVPN is being exploited in the wild. Apply the vendor's security update now.
- Affects
- SonicWall SonicOS SSLVPN
- Published
- 2026-11-06
- US federal due date
- 2026-11-20
- Exploited in the wildHighCVE-2024-27834
Apple Multiple Products
A vulnerability in Apple Multiple Products is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Apple Multiple Products
- Published
- 2026-11-04
- US federal due date
- 2026-11-18
WordPress WordPress Core
A vulnerability in WordPress WordPress Core is being exploited in the wild. Apply the vendor's security update now.
- Affects
- WordPress WordPress Core
- Published
- 2026-11-03
- US federal due date
- 2026-11-06
Ivanti Connect Secure
A vulnerability in Ivanti Connect Secure is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Ivanti Connect Secure
- Published
- 2026-10-30
- US federal due date
- 2026-11-13
Ivanti Connect Secure
A vulnerability in Ivanti Connect Secure is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Ivanti Connect Secure
- Published
- 2026-10-30
- US federal due date
- 2026-11-02
- Exploited in the wildHighCVE-2026-97229
GitLab Community Edition and Enterprise Edition
A vulnerability in GitLab Community Edition and Enterprise Edition is being exploited in the wild. Apply the vendor's security update now.
- Affects
- GitLab Community Edition and Enterprise Edition
- Published
- 2026-10-29
- US federal due date
- 2026-11-01
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
A vulnerability in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
- Published
- 2026-10-29
- US federal due date
- 2026-11-01
- Exploited in the wildHighCVE-2026-41709
Broadcom VMware ESX
A vulnerability in Broadcom VMware ESX is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Broadcom VMware ESX
- Published
- 2026-10-28
- US federal due date
- 2026-11-11
- Exploited in the wildHighCVE-2026-46300
Linux Kernel
A vulnerability in Linux Kernel is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Linux Kernel
- Published
- 2026-10-28
- US federal due date
- 2026-10-31
Adobe Commerce and Magento
A vulnerability in Adobe Commerce and Magento is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Adobe Commerce and Magento
- Published
- 2026-10-27
- US federal due date
- 2026-11-10
- Exploited in the wildHighCVE-2026-111497
Google Brotli
A vulnerability in Google Brotli is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Google Brotli
- Published
- 2026-10-27
- US federal due date
- 2026-11-10
PHP Group PHP
A vulnerability in PHP Group PHP is being exploited in the wild. Apply the vendor's security update now.
- Affects
- PHP Group PHP
- Published
- 2026-10-26
- US federal due date
- 2026-10-29
PHP Group PHP
A vulnerability in PHP Group PHP is being exploited in the wild. Apply the vendor's security update now.
- Affects
- PHP Group PHP
- Published
- 2026-10-26
- US federal due date
- 2026-10-29
- Exploited in the wildHighCVE-2026-114625
Arista VeloCloud Orchestrator
A vulnerability in Arista VeloCloud Orchestrator is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Arista VeloCloud Orchestrator
- Published
- 2026-10-23
- US federal due date
- 2026-10-26
- Exploited in the wildHighCVE-2026-110447
Collabora Collabora Online – Built-in CODE Server
A vulnerability in Collabora Collabora Online – Built-in CODE Server is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Collabora Collabora Online – Built-in CODE Server
- Published
- 2026-10-23
- US federal due date
- 2026-10-26
- Exploited in the wildHighCVE-2026-106931
EG Secure Solutions SiteGuard Server Edition
A vulnerability in EG Secure Solutions SiteGuard Server Edition is being exploited in the wild. Apply the vendor's security update now.
- Affects
- EG Secure Solutions SiteGuard Server Edition
- Published
- 2026-10-20
- US federal due date
- 2026-10-23
- Exploited in the wildHighCVE-2026-96656
Plex Media Server
A vulnerability in Plex Media Server is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Plex Media Server
- Published
- 2026-10-20
- US federal due date
- 2026-10-23
- Exploited in the wildHighCVE-2026-96655
Plex Media Server
A vulnerability in Plex Media Server is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Plex Media Server
- Published
- 2026-10-20
- US federal due date
- 2026-11-03
- Exploited in the wildHighCVE-2026-96654
Plex Media Server
A vulnerability in Plex Media Server is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Plex Media Server
- Published
- 2026-10-20
- US federal due date
- 2026-10-23
- Exploited in the wildHighCVE-2026-96652
Plex Media Server
A vulnerability in Plex Media Server is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Plex Media Server
- Published
- 2026-10-20
- US federal due date
- 2026-11-03
- Exploited in the wildHighCVE-2026-110936
Siemens Software Center
A vulnerability in Siemens Software Center is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Siemens Software Center
- Published
- 2026-10-20
- US federal due date
- 2026-11-03
- Exploited in the wildHighCVE-2026-102764
BeyondTrust Remote Support
A vulnerability in BeyondTrust Remote Support is being exploited in the wild. Apply the vendor's security update now.
- Affects
- BeyondTrust Remote Support
- Published
- 2026-10-16
- US federal due date
- 2026-10-19
Fortinet Multiple Products
A vulnerability in Fortinet Multiple Products is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Fortinet Multiple Products
- Published
- 2026-10-16
- US federal due date
- 2026-10-19
- Exploited in the wildHighCVE-2026-21589
Atlassian Multiple Products
A vulnerability in Atlassian Multiple Products is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Atlassian Multiple Products
- Published
- 2026-10-15
- US federal due date
- 2026-10-18
- Exploited in the wildHighCVE-2026-105134
Ahsay AhsayCBS
A vulnerability in Ahsay AhsayCBS is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Ahsay AhsayCBS
- Published
- 2026-10-14
- US federal due date
- 2026-10-17
Cisco Secure Email Gateway
A vulnerability in Cisco Secure Email Gateway is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Cisco Secure Email Gateway
- Published
- 2026-10-14
- US federal due date
- 2026-10-17
- Exploited in the wildHighCVE-2026-105133
Ahsay AhsayCBS
A vulnerability in Ahsay AhsayCBS is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Ahsay AhsayCBS
- Published
- 2026-10-14
- US federal due date
- 2026-10-17
Palo Alto Networks PAN-OS
A vulnerability in Palo Alto Networks PAN-OS is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Palo Alto Networks PAN-OS
- Published
- 2026-10-14
- US federal due date
- 2026-10-17
Ivanti Connect Secure
A vulnerability in Ivanti Connect Secure is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Ivanti Connect Secure
- Published
- 2026-10-13
- US federal due date
- 2026-10-16
Microsoft Windows
A vulnerability in Microsoft Windows is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Microsoft Windows
- Published
- 2026-10-13
- US federal due date
- 2026-10-16
- Exploited in the wildHighCVE-2015-5477
ISC BIND
A vulnerability in ISC BIND is being exploited in the wild. Apply the vendor's security update now.
- Affects
- ISC BIND
- Published
- 2026-10-08
- US federal due date
- 2026-10-11
- Exploited in the wildHighCVE-2016-3081
Apache Struts
A vulnerability in Apache Struts is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Apache Struts
- Published
- 2026-10-08
- US federal due date
- 2026-10-11
- Exploited in the wildHighCVE-2023-22894
Strapi Strapi
A vulnerability in Strapi Strapi is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Strapi Strapi
- Published
- 2026-10-08
- US federal due date
- 2026-10-11
- Exploited in the wildHighCVE-2021-3199
ONLYOFFICE Docs
A vulnerability in ONLYOFFICE Docs is being exploited in the wild. Apply the vendor's security update now.
- Affects
- ONLYOFFICE Docs
- Published
- 2026-10-08
- US federal due date
- 2026-10-11
- Exploited in the wildHighCVE-2015-3306
ProFTPD ProFTPD
A vulnerability in ProFTPD ProFTPD is being exploited in the wild. Apply the vendor's security update now.
- Affects
- ProFTPD ProFTPD
- Published
- 2026-10-08
- US federal due date
- 2026-10-11
Citrix NetScaler
A vulnerability in Citrix NetScaler is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Citrix NetScaler
- Published
- 2026-10-04
- US federal due date
- 2026-10-07
- Exploited in the wildHighCVE-2026-102490
Zammad GmbH Zammad
A vulnerability in Zammad GmbH Zammad is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Zammad GmbH Zammad
- Published
- 2026-10-02
- US federal due date
- 2026-10-05
- Exploited in the wildHighCVE-2026-102489
Zammad GmbH Zammad
A vulnerability in Zammad GmbH Zammad is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Zammad GmbH Zammad
- Published
- 2026-10-02
- US federal due date
- 2026-10-05
Fortinet FortiMail
A vulnerability in Fortinet FortiMail is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Fortinet FortiMail
- Published
- 2026-10-01
- US federal due date
- 2026-10-04
Cisco Catalyst SD-WAN Manager
A vulnerability in Cisco Catalyst SD-WAN Manager is being exploited in the wild. Apply the vendor's security update now.
- Affects
- Cisco Catalyst SD-WAN Manager
- Published
- 2026-09-30
- US federal due date
- 2026-10-03
- Critical · CVSS 9.8CVE-2026-100397
pip:rucio, pip:rucio
A vulnerability in pip:rucio, pip:rucio has been disclosed. Check the vendor's advisory and update.
- Affects
- pip:rucio, pip:rucio, pip:rucio, pip:rucio
- Published
- 2026-11-13
- Critical · CVSS 9.8CVE-2026-119077
CVE-2026-119077
A vulnerability in CVE-2026-119077 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.8CVE-2026-125055
CVE-2026-125055
A vulnerability in CVE-2026-125055 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.8CVE-2026-122006
rubygems:activestorage, rubygems:activestorage
A vulnerability in rubygems:activestorage, rubygems:activestorage has been disclosed. Check the vendor's advisory and update.
- Affects
- rubygems:activestorage, rubygems:activestorage
- Published
- 2026-11-12
npm:mongoose, npm:mongoose
A vulnerability in npm:mongoose, npm:mongoose has been disclosed. Check the vendor's advisory and update.
- Affects
- npm:mongoose, npm:mongoose, npm:mongoose, npm:mongoose
- Published
- 2026-11-10
- Critical · CVSS 9.6CVE-2026-77596
go:github.com/kubeflow/pipelines
A vulnerability in go:github.com/kubeflow/pipelines has been disclosed. Check the vendor's advisory and update.
- Affects
- go:github.com/kubeflow/pipelines
- Published
- 2026-11-09
- Critical · CVSS 9.6CVE-2026-115770
go:github.com/pocket-id/pocket-id/backend
A vulnerability in go:github.com/pocket-id/pocket-id/backend has been disclosed. Check the vendor's advisory and update.
- Affects
- go:github.com/pocket-id/pocket-id/backend
- Published
- 2026-11-09
- Critical · CVSS 9.4CVE-2026-127080
CVE-2026-127080
A vulnerability in CVE-2026-127080 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.4CVE-2026-129165
CVE-2026-129165
A vulnerability in CVE-2026-129165 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.3CVE-2026-127275
CVE-2026-127275
A vulnerability in CVE-2026-127275 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.3CVE-2026-123965
CVE-2026-123965
A vulnerability in CVE-2026-123965 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.3CVE-2026-124002
CVE-2026-124002
A vulnerability in CVE-2026-124002 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-12
- Critical · CVSS 9.3CVE-2026-124010
CVE-2026-124010
A vulnerability in CVE-2026-124010 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-12
- Critical · CVSS 9.2CVE-2026-129124
CVE-2026-129124
A vulnerability in CVE-2026-129124 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.2CVE-2026-129125
CVE-2026-129125
A vulnerability in CVE-2026-129125 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.2CVE-2026-129126
CVE-2026-129126
A vulnerability in CVE-2026-129126 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.2CVE-2026-124020
CVE-2026-124020
A vulnerability in CVE-2026-124020 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.2CVE-2026-124021
CVE-2026-124021
A vulnerability in CVE-2026-124021 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.2CVE-2026-124006
CVE-2026-124006
A vulnerability in CVE-2026-124006 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-12
- Critical · CVSS 9.1CVE-2026-103813
CVE-2026-103813
A vulnerability in CVE-2026-103813 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.1CVE-2026-129161
CVE-2026-129161
A vulnerability in CVE-2026-129161 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- Critical · CVSS 9.1CVE-2026-118740
nuget:Aspire.Dashboard.Sdk.linux-x64, nuget:Aspire.Dashboard.Sdk.linux-arm64
A vulnerability in nuget:Aspire.Dashboard.Sdk.linux-x64, nuget:Aspire.Dashboard.Sdk.linux-arm64 has been disclosed. Check the vendor's advisory and update.
- Affects
- nuget:Aspire.Dashboard.Sdk.linux-x64, nuget:Aspire.Dashboard.Sdk.linux-arm64, nuget:Aspire.Dashboard.Sdk.linux-musl-x64, nuget:Aspire.Dashboard.Sdk.osx-x64
- Published
- 2026-11-12
- Critical · CVSS 9.1GHSA-2f3w-v7f5-vpgx
nuget:Aspire.Dashboard.Sdk.linux-x64
A vulnerability in nuget:Aspire.Dashboard.Sdk.linux-x64 has been disclosed. Check the vendor's advisory and update.
- Affects
- nuget:Aspire.Dashboard.Sdk.linux-x64
- Published
- 2026-11-10
- Critical · CVSS 9.1CVE-2026-102894
pip:gpustack
A vulnerability in pip:gpustack has been disclosed. Check the vendor's advisory and update.
- Affects
- pip:gpustack
- Published
- 2026-11-10
npm:node-opcua, npm:node-opcua-address-space
A vulnerability in npm:node-opcua, npm:node-opcua-address-space has been disclosed. Check the vendor's advisory and update.
- Affects
- npm:node-opcua, npm:node-opcua-address-space, npm:node-opcua-server
- Published
- 2026-11-10
- High · CVSS 8.8CVE-2024-58405
CVE-2024-58405
A vulnerability in CVE-2024-58405 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- High · CVSS 8.8CVE-2026-111545
CVE-2026-111545
A vulnerability in CVE-2026-111545 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
- High · CVSS 8.8CVE-2026-52788
CVE-2026-52788
A vulnerability in CVE-2026-52788 has been disclosed. Check the vendor's advisory and update.
- Published
- 2026-11-13
Showing the 80 most urgent. Use the filters for the rest.
Is your site affected?
Tell us your stack and we will tell you whether it applies and what to do first.