CVEs in the news
170 CVEs this week34 in CISA KEV5 federal deadlines
| CVE | Vulnerability | CVSS | Deadline | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-110447 | Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora Online - Built-in CODE Server | CVSS9.2Critical | ExploitedDeadline 26 Oct | EPSS2.3% | 7articles | |
| CVE-2026-114625 | Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista Networks VeloCloud Orchestrator | CVSS9.9Critical | ExploitedDeadline 26 Oct | EPSS0.8% | 7articles | |
| CVE-2026-110936 | Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens Software Center | CVSS8.4High | ExploitedDeadline 3 Nov | EPSS1.0% | 5articles | |
| CVE-2026-96652 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server | CVSS5.3Medium | ExploitedDeadline 3 Nov | EPSS1.8% | 5articles | |
| CVE-2026-96655 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server | CVSS5.3Medium | ExploitedDeadline 3 Nov | EPSS0.5% | 5articles |
5 CVEs of 5 in this view in the news this week · 376 exploited CVEs tracked overall.