BETWEEN 12 and 18 October 2026, CVE Watchtower logged 5,499 new vulnerabilities, with this weekly review tracking 12 exploited flaws. Six of those were flagged by Daily Cybersecurity’s intelligence sources, and three of the exploited flaws are not yet present in CISA’s Known Exploited Vulnerabilities (KEV) catalogue. The week saw a substantial rise in critical flaws (395 with CVSS 9.0+), alongside 2,427 high and 1,911 medium-rated flaws. 118 were rated low and 648 had no score yet. At the time of publication, three of Daily Cybersecurity’s six exploited CVEs were not yet listed in KEV.
Highlights from the exploited vulnerabilities include BeyondTrust Remote Support (CVE-2026-102764), where unauthenticated attackers could upload files; Cisco Secure Email Gateway (CVE-2026-76519), which allows file writes and root-level command execution under File Reputation, with active attacks reported by Cisco and visibility of nearly 300 exposed gateways; and Rank Math SEO PRO for WordPress (CVE-2026-111862), linked to a supply-chain compromise in a subset of version 3.0.123 and observed malware activity during a window from 15 October 20:02 UTC to 16 October 07:12 UTC.
Also flagged by KEV are Atlassian Data Center (CVE-2026-21589), Ahsay AhsayCBS (CVE-2026-105134 and CVE-2026-105133), Fortinet FortiOS/FortiProxy (CVE-2025-61624), PAN-OS (CVE-2026-0322), and Windows Shell (CVE-2026-96951). The report notes lead times ranging from same-day additions to one-day delays relative to KEV, and cautions that “Not listed” entries may join KEV later.
Defenders are urged to apply updates for BeyondTrust, Cisco Content Scanner Tools, Rank Math, Ivanti Connect Secure, Fortinet, PAN-OS, Atlassian and SiteGuard, and to upgrade AhsayCBS and the EC-CUBE AmazonPay plugin. SOURCE_UNAVAILABLE