Community Edition and Enterprise Edition
No CISA KEV deadline is open. CISA last added a Community Edition and Enterprise Edition CVE on 11 Sep.
Tracked since 11 Sep · latest article Tue 13 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
12 articles from 8 outlets since 11 Sep; the latest 13 days ago.
- Article
- First report
- Official notice
Show as table
Who reported 8 outlets, last 12 months
- SecurityOnline3
- The Hacker News2
- Security Affairs2
- CISA1
- SecurityWeek1
- Dark Reading1
- Infosecurity1
- Rapid71
- GitLab Patches Critical Flaw That Could Let Attackers Run Server CodeThe Hacker News
- Actively Exploited Vulnerabilities Jump to 100 in Q3 2026SecurityOnline
- CISA Warns of Active Exploitation of Critical GitLab File Theft FlawDark Reading
- CISA Flags Artifactory, ScreenConnect and GitLab Flaws as ExploitedSecurity Affairs
- Critical GitLab Flaw Exploited as CISA Orders Emergency PatchingRapid7
- GitLab Urges Patching as Attackers Probe Critical File-Read FlawInfosecurity
- CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik FlawsSecurityOnline
- GitLab Zero Day Lets Attackers Steal Secrets From Public ServersSecurity Affairs
- CISA Flags Actively Exploited GitLab Flaw Exposing Arbitrary FilesCISA · official notice
- GitLab Patches CVSS 10 Flaw Exploited to Steal SecretsThe Hacker News
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.