d4 · tools · cve
Which vulnerabilities are actually being exploited? This tracks CISA's Known Exploited Vulnerabilities catalogue, enriches any CVE with severity (CVSS) and exploit probability (EPSS) on demand, and offers per-vendor RSS feeds plus optional email alerts - no account needed, no tracking of what you look up.
| CVE | Vendor / product | What it is | Added | Fix due |
|---|---|---|---|---|
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code … | 2026-10-29 | 2026-11-01 |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthen… | 2026-10-29 | 2026-11-01 |
| CVE-2026-46300 | Linux Kernel | Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve … | 2026-10-28 | 2026-10-31 |
| CVE-2026-41709 | Broadcom VMware ESX | Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged… | 2026-10-28 | 2026-11-11 |
| CVE-2026-48356 | Adobe Commerce and Magento | Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the cu… | 2026-10-27 | 2026-11-10 |
| CVE-2026-111497 | Google Brotli | Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive … | 2026-10-27 | 2026-11-10 |
| CVE-2026-109619 | PHP Group PHP | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. | 2026-10-26 | 2026-10-29 |
| CVE-2026-109618 | PHP Group PHP | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. | 2026-10-26 | 2026-10-29 |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the V… | 2026-10-23 | 2026-10-26 |
| CVE-2026-110447 | Collabora Collabora Online – Built-in CODE Server | Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execu… | 2026-10-23 | 2026-10-26 |
| CVE-2026-96656 | Plex Media Server | Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. Thi… | 2026-10-20 | 2026-10-23 |
| CVE-2026-96655 | Plex Media Server | Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses v… | 2026-10-20 | 2026-11-03 |
| CVE-2026-96654 | Plex Media Server | Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and… | 2026-10-20 | 2026-10-23 |
| CVE-2026-96652 | Plex Media Server | Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'pro… | 2026-10-20 | 2026-11-03 |
| CVE-2026-110936 | Siemens Software Center | Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a … | 2026-10-20 | 2026-11-03 |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYST… | 2026-10-20 | 2026-10-23 |
| CVE-2026-102764 | BeyondTrust Remote Support | BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. | 2026-10-16 | 2026-10-19 |
| CVE-2025-61624 | Fortinet Multiple Products | FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read… | 2026-10-16 | 2026-10-19 |
| CVE-2026-21589 | Atlassian Multiple Products | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data… | 2026-10-15 | 2026-10-18 |
| CVE-2026-76519 | Cisco Secure Email Gateway | Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlyin… | 2026-10-14 | 2026-10-17 |
| CVE-2026-105134 | Ahsay AhsayCBS | Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter… | 2026-10-14 | 2026-10-17 |
| CVE-2026-105133 | Ahsay AhsayCBS | Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in t… | 2026-10-14 | 2026-10-17 |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privi… | 2026-10-14 | 2026-10-17 |
| CVE-2026-96951 | Microsoft Windows | Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-13 | 2026-10-16 |
| CVE-2026-104935 | Ivanti Connect Secure | Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands. | 2026-10-13 | 2026-10-16 |
| CVE-2023-22894 | Strapi Strapi | Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details vi… | 2026-10-08 | 2026-10-11 |
| CVE-2021-3199 | ONLYOFFICE Docs | ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code e… | 2026-10-08 | 2026-10-11 |
| CVE-2016-3081 | Apache Struts | Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is e… | 2026-10-08 | 2026-10-11 |
| CVE-2015-5477 | ISC BIND | ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. | 2026-10-08 | 2026-10-11 |
| CVE-2015-3306 | ProFTPD ProFTPD | ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. | 2026-10-08 | 2026-10-11 |
Showing the 30 most recent of 1,764 catalogued vulnerabilities (synced 2026-10-30 02:50 UTC). "Fix due" is the deadline CISA sets for US federal agencies - a decent urgency yardstick for everyone else too.
New exploited CVEs for one vendor, straight into your feed reader - no account needed. Full feed covers everything.
Microsoft (390) Cisco (102) Apple (95) Adobe (83) Google (76) Oracle (46) Apache (41) Ivanti (36) Fortinet (32) Linux (32) Citrix (27) D-Link (26) VMware (26) SonicWall (19) Synacor (19) Android (17) Palo Alto Networks (16) Samsung (15) Atlassian (14) SAP (14) Mozilla (13) Zyxel (13) Qualcomm (12) Trend Micro (12)
A short email when CISA catalogues something new, linking to the detail here. Double opt-in, unsubscribe in every alert, and nothing about your tracker use is ever logged. More about the alerts.
Sources: CISA Known Exploited Vulnerabilities catalogue (synced daily), the NVD (per-CVE detail, fetched on demand and cached) and FIRST EPSS (exploit probability, refreshed daily). This site stores no personal data about what you look up.