Whitehat SecurityTM · Trademark pending

Today's vulnerabilities

Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.

  • Auto-updated hourly · last updated 11/14/2026, 09:35
  • 119 total
  • 50 exploited
  • Critical 83
  • High 36
  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-123039

    Check Point Multiple Products (CVE-2026-123039)

    A vulnerability in Check Point Multiple Products (CVE-2026-123039) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Check Point Multiple Products (CVE-2026-123039)
    Published
    2026-11-13
    US federal due date
    2026-11-16

    Source · CISASource · NVD

  • HighNetwork deviceskisa:f9c07baf

    [KISA KrCERT Advisory] Ivanti 제품 Security Update Notice

    A vulnerability in [KISA KrCERT Advisory] Ivanti 제품 Security Update Notice has been disclosed. Check the vendor's advisory and update.

    Affects
    [KISA KrCERT Advisory] Ivanti 제품 Security Update Notice
    Published
    2026-11-11

    Source · KISA 보호나라

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-20320

    Cisco BroadWorks (CVE-2026-20320)

    A vulnerability in Cisco BroadWorks (CVE-2026-20320) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco BroadWorks (CVE-2026-20320)
    Published
    2026-11-10
    US federal due date
    2026-11-24

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-111560

    Barracuda Networks Multiple Products (CVE-2026-111560)

    A vulnerability in Barracuda Networks Multiple Products (CVE-2026-111560) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Barracuda Networks Multiple Products (CVE-2026-111560)
    Published
    2026-11-10
    US federal due date
    2026-11-13

    Source · CISASource · NVD

  • High · CVSS 8.6Network devicesnvd:CVE-2026-123958

    TOTOLINK CA300-PoE (CVE-2026-123958) [CVSS 8.6]

    A vulnerability in TOTOLINK CA300-PoE (CVE-2026-123958) [CVSS 8.6] has been disclosed. Check the vendor's advisory and update.

    Affects
    TOTOLINK CA300-PoE (CVE-2026-123958) [CVSS 8.6]
    Published
    2026-11-07

    Source · NVD

  • High · CVSS 8.5Network devicesnvd:CVE-2026-123959

    TOTOLINK CA300-PoE (CVE-2026-123959) [CVSS 8.5]

    A vulnerability in TOTOLINK CA300-PoE (CVE-2026-123959) [CVSS 8.5] has been disclosed. Check the vendor's advisory and update.

    Affects
    TOTOLINK CA300-PoE (CVE-2026-123959) [CVSS 8.5]
    Published
    2026-11-07

    Source · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-19868

    SonicWall SonicOS SSLVPN (CVE-2026-19868)

    A vulnerability in SonicWall SonicOS SSLVPN (CVE-2026-19868) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    SonicWall SonicOS SSLVPN (CVE-2026-19868)
    Published
    2026-11-06
    US federal due date
    2026-11-20

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-118527

    Ivanti Connect Secure (CVE-2026-118527)

    A vulnerability in Ivanti Connect Secure (CVE-2026-118527) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-118527)
    Published
    2026-10-30
    US federal due date
    2026-11-13

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-111357

    Ivanti Connect Secure (CVE-2026-111357)

    A vulnerability in Ivanti Connect Secure (CVE-2026-111357) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-111357)
    Published
    2026-10-30
    US federal due date
    2026-11-02

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-76418

    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)

    A vulnerability in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)
    Published
    2026-10-29
    US federal due date
    2026-11-01

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2025-61624

    Fortinet Multiple Products (CVE-2025-61624)

    A vulnerability in Fortinet Multiple Products (CVE-2025-61624) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Fortinet Multiple Products (CVE-2025-61624)
    Published
    2026-10-16
    US federal due date
    2026-10-19

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-76519

    Cisco Secure Email Gateway (CVE-2026-76519)

    A vulnerability in Cisco Secure Email Gateway (CVE-2026-76519) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Cisco Secure Email Gateway (CVE-2026-76519)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Read our explainerWatch the video

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-0322

    Palo Alto Networks PAN-OS (CVE-2026-0322)

    A vulnerability in Palo Alto Networks PAN-OS (CVE-2026-0322) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Palo Alto Networks PAN-OS (CVE-2026-0322)
    Published
    2026-10-14
    US federal due date
    2026-10-17

    Read our explainer

    Source · CISASource · NVD

  • Exploited in the wildCriticalNetwork deviceskev:CVE-2026-104935

    Ivanti Connect Secure (CVE-2026-104935)

    A vulnerability in Ivanti Connect Secure (CVE-2026-104935) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    Ivanti Connect Secure (CVE-2026-104935)
    Published
    2026-10-13
    US federal due date
    2026-10-16

    Read our explainer

    Source · CISASource · NVD

Is your site affected?

Tell us your stack and we will tell you whether it applies and what to do first.

1:1 security consultation on TelegramSecurity check pricingRead the Security blog