Whitehat SecurityTM · Trademark pending

Today's vulnerabilities

Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.

  • Auto-updated hourly · last updated 11/14/2026, 09:35
  • 119 total
  • 50 exploited
  • Critical 83
  • High 36
  • Exploited in the wildCriticalkev:CVE-2026-114713

    UnrealIRCd UnrealIRCd (CVE-2026-114713)

    A vulnerability in UnrealIRCd UnrealIRCd (CVE-2026-114713) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    UnrealIRCd UnrealIRCd (CVE-2026-114713)
    Published
    2026-11-13
    US federal due date
    2026-11-16

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-123039

    Check Point Multiple Products (CVE-2026-123039)

    A vulnerability in Check Point Multiple Products (CVE-2026-123039) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Check Point Multiple Products (CVE-2026-123039)
    Published
    2026-11-13
    US federal due date
    2026-11-16

    Source · CISASource · NVD

  • Exploited in the wildCriticalWindowskev:CVE-2026-124194

    Microsoft Office (CVE-2026-124194)

    A vulnerability in Microsoft Office (CVE-2026-124194) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Microsoft Office (CVE-2026-124194)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-111793

    Openwave Messaging Limited Webtop Media Transcoder (CVE-2026-111793)

    A vulnerability in Openwave Messaging Limited Webtop Media Transcoder (CVE-2026-111793) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Openwave Messaging Limited Webtop Media Transcoder (CVE-2026-111793)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-20320

    Cisco BroadWorks (CVE-2026-20320)

    A vulnerability in Cisco BroadWorks (CVE-2026-20320) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco BroadWorks (CVE-2026-20320)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-111560

    Barracuda Networks Multiple Products (CVE-2026-111560)

    A vulnerability in Barracuda Networks Multiple Products (CVE-2026-111560) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Barracuda Networks Multiple Products (CVE-2026-111560)
    Published
    2026-11-10
    US federal due date
    2026-11-13

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-116606

    Barracuda Networks Barracuda Email Security Gateway (ESG) (CVE-2026-116606)

    A vulnerability in Barracuda Networks Barracuda Email Security Gateway (ESG) (CVE-2026-116606) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Barracuda Networks Barracuda Email Security Gateway (ESG) (CVE-2026-116606)
    Published
    2026-11-10
    US federal due date
    2026-11-13

    Source · CISASource · NVD

  • Exploited in the wildCriticalChromekev:CVE-2026-125350

    Google Chromium (CVE-2026-125350)

    A vulnerability in Google Chromium (CVE-2026-125350) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Google Chromium (CVE-2026-125350)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-102895

    GPUStack GPUStack (CVE-2026-102895)

    A vulnerability in GPUStack GPUStack (CVE-2026-102895) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    GPUStack GPUStack (CVE-2026-102895)
    Published
    2026-11-09
    US federal due date
    2026-11-12

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-123158

    OpenBSD OpenSSH (CVE-2026-123158)

    A vulnerability in OpenBSD OpenSSH (CVE-2026-123158) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    OpenBSD OpenSSH (CVE-2026-123158)
    Published
    2026-11-09
    US federal due date
    2026-11-12

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-116779

    SignalWire FreeSwitch (CVE-2026-116779)

    A vulnerability in SignalWire FreeSwitch (CVE-2026-116779) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    SignalWire FreeSwitch (CVE-2026-116779)
    Published
    2026-11-09
    US federal due date
    2026-11-12

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-123218

    IBM Aspera Faspex (CVE-2026-123218)

    A vulnerability in IBM Aspera Faspex (CVE-2026-123218) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    IBM Aspera Faspex (CVE-2026-123218)
    Published
    2026-11-09
    US federal due date
    2026-11-12

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-19868

    SonicWall SonicOS SSLVPN (CVE-2026-19868)

    A vulnerability in SonicWall SonicOS SSLVPN (CVE-2026-19868) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    SonicWall SonicOS SSLVPN (CVE-2026-19868)
    Published
    2026-11-06
    US federal due date
    2026-11-20

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalChromekev:CVE-2024-27834

    Apple Multiple Products (CVE-2024-27834)

    A vulnerability in Apple Multiple Products (CVE-2024-27834) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Apple Multiple Products (CVE-2024-27834)
    Published
    2026-11-04
    US federal due date
    2026-11-18

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalWordPresskev:CVE-2026-119977

    WordPress WordPress Core (CVE-2026-119977)

    A vulnerability in WordPress WordPress Core (CVE-2026-119977) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    WordPress WordPress Core (CVE-2026-119977)
    Published
    2026-11-03
    US federal due date
    2026-11-06

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-118527

    Ivanti Connect Secure (CVE-2026-118527)

    A vulnerability in Ivanti Connect Secure (CVE-2026-118527) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-118527)
    Published
    2026-10-30
    US federal due date
    2026-11-13

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-111357

    Ivanti Connect Secure (CVE-2026-111357)

    A vulnerability in Ivanti Connect Secure (CVE-2026-111357) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-111357)
    Published
    2026-10-30
    US federal due date
    2026-11-02

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-97229

    GitLab Community Edition and Enterprise Edition (CVE-2026-97229)

    A vulnerability in GitLab Community Edition and Enterprise Edition (CVE-2026-97229) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    GitLab Community Edition and Enterprise Edition (CVE-2026-97229)
    Published
    2026-10-29
    US federal due date
    2026-11-01

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-76418

    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)

    A vulnerability in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)
    Published
    2026-10-29
    US federal due date
    2026-11-01

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-41709

    Broadcom VMware ESX (CVE-2026-41709)

    A vulnerability in Broadcom VMware ESX (CVE-2026-41709) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Broadcom VMware ESX (CVE-2026-41709)
    Published
    2026-10-28
    US federal due date
    2026-11-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-46300

    Linux Kernel (CVE-2026-46300)

    A vulnerability in Linux Kernel (CVE-2026-46300) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Linux Kernel (CVE-2026-46300)
    Published
    2026-10-28
    US federal due date
    2026-10-31

    Source · CISASource · NVD

  • Exploited in the wildCriticalOnline storekev:CVE-2026-48356

    Adobe Commerce and Magento (CVE-2026-48356)

    A vulnerability in Adobe Commerce and Magento (CVE-2026-48356) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Adobe Commerce and Magento (CVE-2026-48356)
    Published
    2026-10-27
    US federal due date
    2026-11-10

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-111497

    Google Brotli (CVE-2026-111497)

    A vulnerability in Google Brotli (CVE-2026-111497) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Google Brotli (CVE-2026-111497)
    Published
    2026-10-27
    US federal due date
    2026-11-10

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-109618

    PHP Group PHP (CVE-2026-109618)

    A vulnerability in PHP Group PHP (CVE-2026-109618) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    PHP Group PHP (CVE-2026-109618)
    Published
    2026-10-26
    US federal due date
    2026-10-29

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-109619

    PHP Group PHP (CVE-2026-109619)

    A vulnerability in PHP Group PHP (CVE-2026-109619) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    PHP Group PHP (CVE-2026-109619)
    Published
    2026-10-26
    US federal due date
    2026-10-29

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-114625

    Arista VeloCloud Orchestrator (CVE-2026-114625)

    A vulnerability in Arista VeloCloud Orchestrator (CVE-2026-114625) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Arista VeloCloud Orchestrator (CVE-2026-114625)
    Published
    2026-10-23
    US federal due date
    2026-10-26

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-110447

    Collabora Collabora Online – Built-in CODE Server (CVE-2026-110447)

    A vulnerability in Collabora Collabora Online – Built-in CODE Server (CVE-2026-110447) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Collabora Collabora Online – Built-in CODE Server (CVE-2026-110447)
    Published
    2026-10-23
    US federal due date
    2026-10-26

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-106931

    EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931)

    A vulnerability in EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    EG Secure Solutions SiteGuard Server Edition (CVE-2026-106931)
    Published
    2026-10-20
    US federal due date
    2026-10-23

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-96656

    Plex Media Server (CVE-2026-96656)

    A vulnerability in Plex Media Server (CVE-2026-96656) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Plex Media Server (CVE-2026-96656)
    Published
    2026-10-20
    US federal due date
    2026-10-23

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-96655

    Plex Media Server (CVE-2026-96655)

    A vulnerability in Plex Media Server (CVE-2026-96655) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Plex Media Server (CVE-2026-96655)
    Published
    2026-10-20
    US federal due date
    2026-11-03

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-96654

    Plex Media Server (CVE-2026-96654)

    A vulnerability in Plex Media Server (CVE-2026-96654) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Plex Media Server (CVE-2026-96654)
    Published
    2026-10-20
    US federal due date
    2026-10-23

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-96652

    Plex Media Server (CVE-2026-96652)

    A vulnerability in Plex Media Server (CVE-2026-96652) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Plex Media Server (CVE-2026-96652)
    Published
    2026-10-20
    US federal due date
    2026-11-03

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-110936

    Siemens Software Center (CVE-2026-110936)

    A vulnerability in Siemens Software Center (CVE-2026-110936) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Siemens Software Center (CVE-2026-110936)
    Published
    2026-10-20
    US federal due date
    2026-11-03

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-102764

    BeyondTrust Remote Support (CVE-2026-102764)

    A vulnerability in BeyondTrust Remote Support (CVE-2026-102764) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    BeyondTrust Remote Support (CVE-2026-102764)
    Published
    2026-10-16
    US federal due date
    2026-10-19

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2025-61624

    Fortinet Multiple Products (CVE-2025-61624)

    A vulnerability in Fortinet Multiple Products (CVE-2025-61624) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Fortinet Multiple Products (CVE-2025-61624)
    Published
    2026-10-16
    US federal due date
    2026-10-19

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-21589

    Atlassian Multiple Products (CVE-2026-21589)

    A vulnerability in Atlassian Multiple Products (CVE-2026-21589) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Atlassian Multiple Products (CVE-2026-21589)
    Published
    2026-10-15
    US federal due date
    2026-10-18

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-105134

    Ahsay AhsayCBS (CVE-2026-105134)

    A vulnerability in Ahsay AhsayCBS (CVE-2026-105134) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ahsay AhsayCBS (CVE-2026-105134)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-76519

    Cisco Secure Email Gateway (CVE-2026-76519)

    A vulnerability in Cisco Secure Email Gateway (CVE-2026-76519) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco Secure Email Gateway (CVE-2026-76519)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-105133

    Ahsay AhsayCBS (CVE-2026-105133)

    A vulnerability in Ahsay AhsayCBS (CVE-2026-105133) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ahsay AhsayCBS (CVE-2026-105133)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-0322

    Palo Alto Networks PAN-OS (CVE-2026-0322)

    A vulnerability in Palo Alto Networks PAN-OS (CVE-2026-0322) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Palo Alto Networks PAN-OS (CVE-2026-0322)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-104935

    Ivanti Connect Secure (CVE-2026-104935)

    A vulnerability in Ivanti Connect Secure (CVE-2026-104935) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-104935)
    Published
    2026-10-13
    US federal due date
    2026-10-16

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalWindowskev:CVE-2026-96951

    Microsoft Windows (CVE-2026-96951)

    A vulnerability in Microsoft Windows (CVE-2026-96951) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Microsoft Windows (CVE-2026-96951)
    Published
    2026-10-13
    US federal due date
    2026-10-16

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2015-5477

    ISC BIND (CVE-2015-5477)

    A vulnerability in ISC BIND (CVE-2015-5477) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    ISC BIND (CVE-2015-5477)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2016-3081

    Apache Struts (CVE-2016-3081)

    A vulnerability in Apache Struts (CVE-2016-3081) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Apache Struts (CVE-2016-3081)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2023-22894

    Strapi Strapi (CVE-2023-22894)

    A vulnerability in Strapi Strapi (CVE-2023-22894) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Strapi Strapi (CVE-2023-22894)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalWindowskev:CVE-2021-3199

    ONLYOFFICE Docs (CVE-2021-3199)

    A vulnerability in ONLYOFFICE Docs (CVE-2021-3199) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    ONLYOFFICE Docs (CVE-2021-3199)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2015-3306

    ProFTPD ProFTPD (CVE-2015-3306)

    A vulnerability in ProFTPD ProFTPD (CVE-2015-3306) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    ProFTPD ProFTPD (CVE-2015-3306)
    Published
    2026-10-08
    US federal due date
    2026-10-11

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-88779

    Citrix NetScaler (CVE-2026-88779)

    A vulnerability in Citrix NetScaler (CVE-2026-88779) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Citrix NetScaler (CVE-2026-88779)
    Published
    2026-10-04
    US federal due date
    2026-10-07

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-102490

    Zammad GmbH Zammad (CVE-2026-102490)

    A vulnerability in Zammad GmbH Zammad (CVE-2026-102490) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Zammad GmbH Zammad (CVE-2026-102490)
    Published
    2026-10-02
    US federal due date
    2026-10-05

    Source · CISASource · NVD

  • Exploited in the wildCriticalkev:CVE-2026-102489

    Zammad GmbH Zammad (CVE-2026-102489)

    A vulnerability in Zammad GmbH Zammad (CVE-2026-102489) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Zammad GmbH Zammad (CVE-2026-102489)
    Published
    2026-10-02
    US federal due date
    2026-10-05

    Source · CISASource · NVD

Is your site affected?

Tell us your stack and we will tell you whether it applies and what to do first.

1:1 security consultation on TelegramSecurity check pricingRead the Security blog