Skip to content

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
178CVEs this week26in CISA KEV3federal deadlines
CVEs 151–178 of 178 in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-85748MariaDB: Use-after-free with a large number of SYS_REFCURSOR'sMariaDB server9.9CriticalNot in KEVEPSS 0.9%1 article
CVE-2026-85746MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsMariaDB server9.9CriticalNot in KEVEPSS 1.0%1 article
CVE-2026-85745MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.MariaDB server4.3MediumNot in KEVEPSS 0.5%1 article
CVE-2026-103119Apache Tomcat: AJP response mix-upApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-101356Apache Tomcat: HTTP/2 request/response mix-up after error during async processingApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-101296Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsApache Software Foundation Apache Tomcat9.1CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-113303Google Chrome vulnerabilityGoogle Chrome8.8HighNot in KEVEPSS 0.6%1 article
CVE-2026-113271Google Chrome vulnerabilityGoogle Chrome8.8HighNot in KEVEPSS 0.5%1 article
CVE-2026-91323Oracle Corporation Oracle WebLogic Server vulnerabilityOracle Corporation Oracle WebLogic Server9.8CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-91231Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%2 articles
CVE-2026-91221Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-91216Oracle Corporation Oracle SOA Suite vulnerabilityOracle Corporation Oracle SOA Suite10.0CriticalNot in KEVEPSS 0.5%2 articles
CVE-2026-87337Oracle Corporation Oracle Access Manager vulnerabilityOracle Corporation Oracle Access Manager10.0CriticalNot in KEVEPSS 0.4%2 articles
CVE-2026-83399Oracle Corporation Oracle WebLogic Server vulnerabilityOracle Corporation Oracle WebLogic Server9.8CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43845Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.2CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43844Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.3CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-43836Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.3CriticalNot in KEVEPSS 0.9%1 article
CVE-2026-43830Advantech ADAM-3600 vulnerabilityAdvantech ADAM-36009.8CriticalNot in KEVEPSS 2.5%1 article
CVE-2026-91299Oracle Corporation JD Edwards EnterpriseOne Orchestrator vulnerabilityOracle Corporation JD Edwards EnterpriseOne Orchestrator10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens Software Center8.4HighExploitedDue 3 NovEPSS 1.0%5 articles
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server5.3MediumExploitedDue 3 NovEPSS 1.8%5 articles
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server5.3MediumExploitedDue 3 NovEPSS 1.6%5 articles
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd8.5HighExploitedEPSS 2.5%4 articles
CVE-2026-8496A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7Alinto SOGo SOGo6.1MediumNot in KEVEPSS 0.4%1 article
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office7.8HighExploitedEPSS 71%22 articles
CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS and FortiProxy9.6CriticalExploitedEPSS 94%5 articles
CVE-2026-70774Oracle Corporation Oracle Warehouse Management vulnerabilityOracle Corporation Oracle Warehouse Management7.1HighNot in KEVEPSS 0.3%1 article
CVE-2026-108097No description published yetVendor not yet namedUnratedNot in KEVEPSS –4 articles

CVEs 151–178 of 178 in the news this week · 376 exploited CVEs tracked overall.

First page
CyberSIXTSignal over noise
Updated AboutDevelopersSign in