| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2026-111560
Barracuda Networks Multiple Products OS Command Injection Vulnerability |
Barracuda Networks · Multiple Products | Nov 10, 2026 | Nov 13, 2026 | 1.1% | 1 last Nov 9 |
| CVE-2026-111793
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer … |
Openwave Messaging Limited · Webtop Media Transcoder | Nov 10, 2026 | Nov 24, 2026 | 0.3% | — |
| CVE-2026-116606
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an … |
Barracuda Networks · Barracuda Email Security Gateway (ESG) | Nov 10, 2026 | Nov 13, 2026 | 1.6% | 1 last Nov 9 |
| CVE-2026-124194
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action… |
Microsoft · Office | Nov 10, 2026 | Nov 24, 2026 | — | 1 last Nov 12 |
| CVE-2026-125350
Google Chromium Use-After-Free Vulnerability |
Google · Chromium | Nov 10, 2026 | Nov 24, 2026 | — | 1 last Nov 12 |
| CVE-2026-20320
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerab… |
Cisco · BroadWorks | Nov 10, 2026 | Nov 24, 2026 | 0.4% | — |
| CVE-2026-102895
GPUStack Improper Authentication Vulnerability |
GPUStack · GPUStack | Nov 9, 2026 | Nov 12, 2026 | 0.6% | — |
| CVE-2026-116779
SignalWire FreeSwitch Code Injection Vulnerability |
SignalWire · FreeSwitch | Nov 9, 2026 | Nov 12, 2026 | 2.2% | — |
| CVE-2026-123158
OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability |
OpenBSD · OpenSSH | Nov 9, 2026 | Nov 12, 2026 | 16.5% | 2 last Nov 9 |
| CVE-2026-123218
IBM Aspera Faspex Incorrect Authorization Vulnerability |
IBM · Aspera Faspex | Nov 9, 2026 | Nov 12, 2026 | 0.7% | — |
| CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability |
SonicWall · SonicOS SSLVPN | Nov 6, 2026 | Nov 20, 2026 | 0.5% | 2 last Nov 9 |
| CVE-2024-27834
Apple Multiple Products Improper Authentication Vulnerability |
Apple · Multiple Products | Nov 4, 2026 | Nov 18, 2026 | 1.5% | — |
| CVE-2026-119977
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vuln… |
WordPress · WordPress Core | Nov 3, 2026 | Nov 6, 2026 | 1.2% | — |
| CVE-2026-111357
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability |
Ivanti · Connect Secure | Oct 30, 2026 | Nov 2, 2026 | 0.5% | — |
| CVE-2026-118527
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerab… |
Ivanti · Connect Secure | Oct 30, 2026 | Nov 13, 2026 | 0.8% | — |
| CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Retu… |
Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software | Oct 29, 2026 | Nov 1, 2026 | 0.8% | 1 last Nov 2 |
| CVE-2026-97229
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound … |
GitLab · Community Edition and Enterprise Edition | Oct 29, 2026 | Nov 1, 2026 | 65.2% | 1 last Oct 19 |
| CVE-2026-41709
Broadcom VMWare ESX Insufficient Logging Vulnerability |
Broadcom · VMware ESX | Oct 28, 2026 | Nov 11, 2026 | 0.7% | — |
| CVE-2026-46300
Linux Kernel Missing Initialization of a Variable Vulnerability |
Linux · Kernel | Oct 28, 2026 | Oct 31, 2026 | 16.1% | — |
| CVE-2026-111497
Google Brotli Unchecked Return Value Vulnerability |
Google · Brotli | Oct 27, 2026 | Nov 10, 2026 | 82.6% | 1 last Nov 2 |
| CVE-2026-48356
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vuln… |
Adobe · Commerce and Magento | Oct 27, 2026 | Nov 10, 2026 | 47.5% | — |
| CVE-2026-109618
PHP Memory Corruption Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2026-109619
PHP Stale Internal Request-State Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2026-110447
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability |
Collabora · Collabora Online – Built-in CODE Server | Oct 23, 2026 | Oct 26, 2026 | 73.3% | — |
| CVE-2026-114625
Arista VeloCloud Orchestrator SQL Injection Vulnerability |
Arista · VeloCloud Orchestrator | Oct 23, 2026 | Oct 26, 2026 | 1.0% | 1 last Oct 26 |
| CVE-2026-106931
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability |
EG Secure Solutions · SiteGuard Server Edition | Oct 20, 2026 | Oct 23, 2026 | 2.5% | — |
| CVE-2026-110936
Siemens Software Center Uncontrolled Search Path Element Vulnerability |
Siemens · Software Center | Oct 20, 2026 | Nov 3, 2026 | 1.0% | — |
| CVE-2026-96652
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability |
Plex · Media Server | Oct 20, 2026 | Nov 3, 2026 | 11.9% | — |
| CVE-2026-96654
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page … |
Plex · Media Server | Oct 20, 2026 | Oct 23, 2026 | 1.9% | — |
| CVE-2026-96655
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability |
Plex · Media Server | Oct 20, 2026 | Nov 3, 2026 | 10.7% | — |
| CVE-2026-96656
Plex Media Server External Control of File Name or Path Vulnerability |
Plex · Media Server | Oct 20, 2026 | Oct 23, 2026 | 1.8% | — |
| CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability |
Fortinet · Multiple Products | Oct 16, 2026 | Oct 19, 2026 | 1.3% | — |
| CVE-2026-102764
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability |
BeyondTrust · Remote Support | Oct 16, 2026 | Oct 19, 2026 | 78.0% | 2 last Oct 19 |
| CVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties… |
Atlassian · Multiple Products | Oct 15, 2026 | Oct 18, 2026 | 99.7% | 1 last Oct 12 |
| CVE-2026-0322
Palo Alto Networks PAN-OS Code Injection Vulnerability |
Palo Alto Networks · PAN-OS | Oct 14, 2026 | Oct 17, 2026 | 1.7% | — |
| CVE-2026-105133
Ahsay AhsayCBS Improper Authentication Vulnerability |
Ahsay · AhsayCBS | Oct 14, 2026 | Oct 17, 2026 | 84.5% | — |
| CVE-2026-105134
Ahsay AhsayCBS Command Injection Vulnerability |
Ahsay · AhsayCBS | Oct 14, 2026 | Oct 17, 2026 | 81.8% | — |
| CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability |
Cisco · Secure Email Gateway | Oct 14, 2026 | Oct 17, 2026 | 6.2% | — |
| CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
Ivanti · Connect Secure | Oct 13, 2026 | Oct 16, 2026 | 88.9% | 2 last Oct 19 |
| CVE-2026-96951
Microsoft Windows Command Injection Vulnerability |
Microsoft · Windows | Oct 13, 2026 | Oct 16, 2026 | 9.8% | 1 last Oct 19 |
| CVE-2015-3306
ProFTPD Improper Access Control Vulnerability |
ProFTPD · ProFTPD | Oct 8, 2026 | Oct 11, 2026 | 99.5% | — |
| CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability |
ISC · BIND | Oct 8, 2026 | Oct 11, 2026 | 99.6% | — |
| CVE-2016-3081
Apache Struts Command Injection Vulnerability |
Apache · Struts | Oct 8, 2026 | Oct 11, 2026 | 96.9% | — |
| CVE-2021-3199
ONLYOFFICE Docs Server Path Traversal Vulnerability |
ONLYOFFICE · Docs | Oct 8, 2026 | Oct 11, 2026 | 30.2% | — |
| CVE-2023-22894
Strapi Cleartext Storage of Sensitive Information Vulnerability |
Strapi · Strapi | Oct 8, 2026 | Oct 11, 2026 | 4.1% | — |
| CVE-2026-88779
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memo… |
Citrix · NetScaler | Oct 4, 2026 | Oct 7, 2026 | 11.4% | 1 last Oct 12 |
| CVE-2026-102489
Zammad GmbH Zammad Session Fixation Vulnerability |
Zammad GmbH · Zammad | Oct 2, 2026 | Oct 5, 2026 | 49.9% | — |
| CVE-2026-102490
Zammad GmbH Zammad Improper Privilege Management Vulnerability |
Zammad GmbH · Zammad | Oct 2, 2026 | Oct 5, 2026 | 10.9% | — |
| CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability |
Fortinet · FortiMail | Oct 1, 2026 | Oct 4, 2026 | 4.6% | — |
| CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability |
Cisco · Catalyst SD-WAN Manager | Sep 30, 2026 | Oct 3, 2026 | 38.9% | 1 last Oct 5 |
1 / 44
Next →
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.