| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2026-109618
PHP Memory Corruption Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2026-109619
PHP Stale Internal Request-State Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2026-87491
Google Chromium V8 Out of Bounds Write Vulnerability |
Google · Chromium V8 | Sep 9, 2026 | Sep 23, 2026 | 3.5% | 4 last Oct 16 |
| CVE-2026-85046
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Sep 4, 2026 | Sep 18, 2026 | 1.8% | 4 last Oct 16 |
| CVE-2026-85880
Microsoft Windows Heap-Based Buffer Overflow Vulnerability |
Microsoft · Windows | Sep 8, 2026 | Sep 22, 2026 | 0.4% | 4 last Oct 16 |
| CVE-2025-8088 Ransomware
RARLAB WinRAR Path Traversal Vulnerability |
RARLAB · WinRAR | Aug 12, 2025 | Sep 2, 2025 | 94.3% | 2 last Oct 19 |
| CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
Ivanti · Connect Secure | Oct 13, 2026 | Oct 16, 2026 | 88.9% | 2 last Oct 19 |
| CVE-2026-102764
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability |
BeyondTrust · Remote Support | Oct 16, 2026 | Oct 19, 2026 | 78.0% | 2 last Oct 19 |
| CVE-2026-123158
OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability |
OpenBSD · OpenSSH | Nov 9, 2026 | Nov 12, 2026 | 16.5% | 2 last Nov 9 |
| CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability |
SonicWall · SonicOS SSLVPN | Nov 6, 2026 | Nov 20, 2026 | 0.5% | 2 last Nov 9 |
| CVE-2024-21887 Ransomware
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2023-46805 Ransomware
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2025-25257
Fortinet FortiWeb SQL Injection Vulnerability |
Fortinet · FortiWeb | Jul 18, 2025 | Aug 8, 2025 | 99.9% | 1 last Oct 14 |
| CVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties… |
Atlassian · Multiple Products | Oct 15, 2026 | Oct 18, 2026 | 99.7% | 1 last Oct 12 |
| CVE-2026-35273 Ransomware
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Fu… |
Oracle · PeopleSoft Enterprise PeopleTools | Jun 12, 2026 | Jun 15, 2026 | 96.7% | 1 last Sep 28 |
| CVE-2026-0257 Ransomware
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability |
Palo Alto Networks · PAN-OS | May 29, 2026 | Jun 1, 2026 | 95.6% | 1 last Nov 10 |
| CVE-2026-63077 Ransomware
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability |
JetBrains · TeamCity | Aug 5, 2026 | Aug 8, 2026 | 94.9% | 1 last Nov 10 |
| CVE-2016-6210 | not in KEV | — | — | 88.9% | 1 last Nov 9 |
| CVE-2026-111497
Google Brotli Unchecked Return Value Vulnerability |
Google · Brotli | Oct 27, 2026 | Nov 10, 2026 | 82.6% | 1 last Nov 2 |
| CVE-2026-88771
Citrix NetScaler Improper Input Validation Vulnerability |
Citrix · NetScaler | Sep 27, 2026 | Sep 30, 2026 | 81.9% | 1 last Oct 5 |
| CVE-2026-45659 Ransomware
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint Server | Jul 1, 2026 | Jul 4, 2026 | 80.2% | 1 last Nov 10 |
| CVE-2026-88772
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memo… |
Citrix · NetScaler | Sep 27, 2026 | Sep 30, 2026 | 76.6% | 1 last Oct 5 |
| CVE-2026-97229
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound … |
GitLab · Community Edition and Enterprise Edition | Oct 29, 2026 | Nov 1, 2026 | 65.2% | 1 last Oct 19 |
| CVE-2026-59310 Ransomware
Broadcom VMware vCenter Path Traversal Vulnerability |
Broadcom · VMware vCenter | Aug 18, 2026 | Aug 21, 2026 | 61.7% | 1 last Nov 10 |
| CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability |
Cisco · Catalyst SD-WAN Manager | Sep 30, 2026 | Oct 3, 2026 | 38.9% | 1 last Oct 5 |
| CVE-2026-35029 | not in KEV | — | — | 38.6% | 1 last Oct 19 |
| CVE-2025-14733 Ransomware
WatchGuard Firebox Out of Bounds Write Vulnerability |
WatchGuard · Firebox | Dec 19, 2025 | Dec 26, 2025 | 29.4% | 1 last Nov 10 |
| CVE-2026-86950
Apple Multiple Products Out-of-Bounds Write Vulnerability |
Apple · Multiple Products | Sep 29, 2026 | Oct 13, 2026 | 26.2% | 1 last Oct 5 |
| CVE-2026-90970 | not in KEV | — | — | 17.5% | 1 last Oct 5 |
| CVE-2026-15410 Ransomware
SonicWall SMA1000 Appliances Code Injection Vulnerability |
SonicWall · SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | 11.8% | 1 last Nov 10 |
| CVE-2026-88779
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memo… |
Citrix · NetScaler | Oct 4, 2026 | Oct 7, 2026 | 11.4% | 1 last Oct 12 |
| CVE-2026-96951
Microsoft Windows Command Injection Vulnerability |
Microsoft · Windows | Oct 13, 2026 | Oct 16, 2026 | 9.8% | 1 last Oct 19 |
| CVE-2026-15409 Ransomware
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
SonicWall · SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | 6.8% | 1 last Nov 10 |
| CVE-2025-64393 | not in KEV | — | — | 5.2% | 1 last Oct 12 |
| CVE-2025-60710 Ransomware
Microsoft Windows Link Following Vulnerability |
Microsoft · Windows | Apr 13, 2026 | Apr 27, 2026 | 4.6% | 1 last Nov 10 |
| CVE-2026-76455 | not in KEV | — | — | 4.0% | 1 last Oct 12 |
| CVE-2015-1000013 | not in KEV | — | — | 2.1% | 1 last Oct 15 |
| CVE-2023-45208 | not in KEV | — | — | 1.7% | 1 last Sep 25 |
| CVE-2026-116606
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an … |
Barracuda Networks · Barracuda Email Security Gateway (ESG) | Nov 10, 2026 | Nov 13, 2026 | 1.6% | 1 last Nov 9 |
| CVE-2026-110264 | not in KEV | — | — | 1.3% | 1 last Oct 26 |
| CVE-2026-111560
Barracuda Networks Multiple Products OS Command Injection Vulnerability |
Barracuda Networks · Multiple Products | Nov 10, 2026 | Nov 13, 2026 | 1.1% | 1 last Nov 9 |
| CVE-2026-114625
Arista VeloCloud Orchestrator SQL Injection Vulnerability |
Arista · VeloCloud Orchestrator | Oct 23, 2026 | Oct 26, 2026 | 1.0% | 1 last Oct 26 |
| CVE-2026-51990 | not in KEV | — | — | 0.9% | 1 last Nov 10 |
| CVE-2026-58115 | not in KEV | — | — | 0.9% | 1 last Nov 10 |
| CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Retu… |
Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software | Oct 29, 2026 | Nov 1, 2026 | 0.8% | 1 last Nov 2 |
| CVE-2026-98432 | not in KEV | — | — | 0.8% | 1 last Nov 2 |
| CVE-2026-25085 | not in KEV | — | — | 0.8% | 1 last Nov 11 |
| CVE-2026-118539 | not in KEV | — | — | 0.7% | 1 last Nov 2 |
| CVE-2014-125110 | not in KEV | — | — | 0.6% | 1 last Oct 15 |
| CVE-2026-120422 | not in KEV | — | — | 0.4% | 1 last Nov 10 |
1 / 2
Next →
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.