Vulnerability

Vulnerabilities and CVE tracking, including actively exploited zero-days.

Vulnerability Critical

GitLab CI/CD regex RCE now exploited (CVE-2026-97229)

Nov 1, 2026

Vulnerability Critical

GoAhead web server accepts revoked client certs (CVE-2026-115881)

Nov 1, 2026

Vulnerability High

Ivanti Connect Secure root chain flaws added to CISA KEV

Nov 1, 2026

Vulnerability High

Microsoft Authenticator Android token flaw detailed (AuthMask)

Nov 1, 2026

Vulnerability Critical

BeyondTrust Remote Support zero-day exploited since August

Oct 18, 2026

Vulnerability Critical

Nextcloud Collabora CODE flaw exploited (CVE-2026-110447)

Oct 18, 2026

Vulnerability Critical

SiteGuard Server Edition WAF flaw exploited (CVE-2026-106931)

Oct 18, 2026

Vulnerability Critical

Cisco Secure Email Gateway zero-day gives root (CVE-2026-76519)

Oct 15, 2026

Vulnerability High

Ivanti Connect Secure zero-day chain steals AD secrets

Oct 15, 2026

Vulnerability High

PAN-OS management interface zero-day exploited (CVE-2026-0322)

Oct 15, 2026

Vulnerability Critical

SAP Cloud SDK Python flaw exposes OAuth2 secrets (CVE-2026-89111)

Oct 15, 2026

Vulnerability Critical

AhsayCBS auth bypass and RCE flaws exploited with no patch

Oct 11, 2026

Vulnerability Critical

SonicWall SMA1000 SSRF targeted in the wild (CVE-2026-102255)

Oct 11, 2026

Vulnerability High

Citrix NetScaler SAML zero-day exploited for DoS (CVE-2026-88779)

Oct 8, 2026

Vulnerability Critical

Rejetto HFS session-forgery flaw probed (CVE-2026-61500)

Oct 8, 2026

Vulnerability Critical

Citrix NetScaler: 8 CVEs disclosed, two zero-days exploited

Oct 2, 2026

Vulnerability Critical

Fortinet FortiMail IBE zero-day exploited (CVE-2026-104286)

Oct 2, 2026

Vulnerability High

MCP Python SDK flaw let malicious servers steal OAuth secrets

Oct 2, 2026

Vulnerability High

Zimbra SNMP command injection exploited (CVE-2026-73570)

Oct 2, 2026