Skip to content

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
182CVEs this week30in CISA KEV3federal deadlines
CVEs 51–80 of 80 in this view, from this week’s news
CVEs in the news: CVSS 9.0+, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-76466Cisco Expressway Series Remote Code Execution VulnerabilityCisco TelePresence Video Communication Server (VCS) Expressway9.8CriticalNot in KEVEPSS 0.4%2 articles
CVE-2026-20043Multiple Cisco Products Snort 3 Software Hardening Release: October 2026Cisco Cyber Vision9.0CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut NG/MF9.4CriticalExploitedEPSS 61%22 articles
CVE-2026-111813Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configurationApache Software Foundation Apache Traffic Server10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-105944Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of lifeApache Software Foundation Apache Pulsar Manager10.0CriticalNot in KEVEPSS 0.7%1 article
CVE-2026-105869Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user roleApache Software Foundation Apache Pulsar9.2CriticalNot in KEVEPSS 0.3%1 article
CVE-2026-101809Oracle Corporation Workflow vulnerabilityOracle Corporation Workflow10.0CriticalNot in KEVEPSS 0.5%2 articles
CVE-2026-101808Oracle Corporation Oracle Product Workbench vulnerabilityOracle Corporation Oracle Product Workbench9.1CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-101767Oracle Corporation Oracle Application Object Library vulnerabilityOracle Corporation Oracle Application Object Library9.8CriticalNot in KEVEPSS 0.6%2 articles
CVE-2026-101634Oracle Corporation Oracle Mobile Field Service vulnerabilityOracle Corporation Oracle Mobile Field Service9.1CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-111862Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeRankMath Rank Math SEO PRO9.8CriticalNot in KEVEPSS 0.7%3 articles
CVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system userApache Software Foundation Apache CouchDB9.3CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-92262MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.MariaDB server9.9CriticalNot in KEVEPSS 1.4%1 article
CVE-2026-85748MariaDB: Use-after-free with a large number of SYS_REFCURSOR'sMariaDB server9.9CriticalNot in KEVEPSS 0.9%1 article
CVE-2026-85746MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsMariaDB server9.9CriticalNot in KEVEPSS 1.0%1 article
CVE-2026-103119Apache Tomcat: AJP response mix-upApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-101356Apache Tomcat: HTTP/2 request/response mix-up after error during async processingApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-101296Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-91323Oracle Corporation Oracle WebLogic Server vulnerabilityOracle Corporation Oracle WebLogic Server9.8CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-91231Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%2 articles
CVE-2026-91221Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-91216Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%2 articles
CVE-2026-87337Oracle Corporation Oracle Access Manager vulnerabilityOracle Corporation Oracle Access Manager10.0CriticalNot in KEVEPSS 0.4%2 articles
CVE-2026-83399Oracle Corporation Oracle WebLogic Server vulnerabilityOracle Corporation Oracle WebLogic Server9.8CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43845Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.2CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43844Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.3CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43836Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.3CriticalNot in KEVEPSS 0.9%1 article
CVE-2026-43830Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.8CriticalNot in KEVEPSS 2.5%1 article
CVE-2026-91299Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilityOracle Corporation JD Edwards EnterpriseOne Orchestrator10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS and FortiProxy9.6CriticalExploitedEPSS 94%5 articles

CVEs 51–80 of 80 in this view, from this week’s news · 377 exploited CVEs tracked overall.

First page
CyberSIXTSignal over noise
Updated AboutDevelopersSign in