Skip to main content

Every Monday

Vulnerability brief, week 2026-W44

From 2026-10-26 to 2026-11-01 (UTC), as frozen on the Monday that followed. Each line names its sources.

First attested exploited
29
Added to CISA KEV
10
High EPSS at publication
0

Added to CISA KEV10

  1. CVE-2026-111357KEV since 2026-10-30

    Privilege Escalation in Ivanti Connect Secure via DSCache Configuration Trust Error

    Severity highEPSS lowFixed in 25.1.1.3

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-111357 for CVE-2026-111357
  2. CVE-2026-118527KEV since 2026-10-30

    Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

    Sources: CISA KEV, GCVE · previdian, NVD

    Watch CVE-2026-118527 for CVE-2026-118527
  3. CVE-2026-76418KEV since 2026-10-29

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Severity highEPSS lowFixed in 10.0.3 · 9.24.1.27 · 9.23.1.48 · 9.22.3.200

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-76418 for CVE-2026-76418
  4. CVE-2026-97229KEV since 2026-10-29

    Integer Overflow or Wraparound in GitLab

    Severity criticalEPSS highFixed in 19.4.2 · 19.3.5 · 19.2.8

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-97229 for CVE-2026-97229
  5. CVE-2026-41709KEV since 2026-10-28

    Broadcom VMWare ESX Insufficient Logging Vulnerability

    Severity lowEPSS lowFixed in 9.0.2.0100

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-41709 for CVE-2026-41709
  6. CVE-2026-46300KEV since 2026-10-28

    Linux Kernel Missing Initialization of a Variable Vulnerability

    Severity highEPSS highFixed in 7.0.10 · 6.18.33 · 6.12.91 · 6.6.141

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-46300 for CVE-2026-46300
  7. CVE-2026-111497Node2ShellKEV since 2026-10-27

    Out-of-Bounds Write in Google Brotli Decoder

    Severity criticalEPSS highFixed in 26.12.1 · 24.22.1 · 22.23.4 · 10.0.14

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch Node2Shell for CVE-2026-111497
  8. CVE-2026-48356KEV since 2026-10-27

    Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

    Severity criticalEPSS highFixed in 1.21.0

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-48356 for CVE-2026-48356
  9. CVE-2026-109618PHP2ShellKEV since 2026-10-26

    RCE via OOM corruption

    Severity criticalEPSS highFixed in 12.2.4 · 12.1.4 · 11.2.4 · 11.1.4

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, GCVE · shadowserver, FIRST EPSS, NVD

    Watch PHP2Shell for CVE-2026-109618
  10. CVE-2026-109619PHP2ShellKEV since 2026-10-26

    RCE via stale global state

    Severity criticalEPSS highFixed in 12.2.4 · 12.1.4 · 11.2.4 · 11.1.4

    Sources: CISA KEV, CISA-ADP, GCVE · previdian, GCVE · shadowserver, FIRST EPSS, NVD

    Watch PHP2Shell for CVE-2026-109619

Exploitation first attested10

  1. CVE-2026-85688exploited since 2026-10-28

    Severity criticalEPSS medium

    Sources: GCVE · previdian, GCVE · shadowserver, FIRST EPSS, NVD

    Watch CVE-2026-85688 for CVE-2026-85688
  2. CVE-2026-34892exploited since 2026-10-31

    Severity mediumEPSS low

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-34892 for CVE-2026-34892
  3. CVE-2023-2356exploited since 2026-10-30

    Severity highEPSS mediumFixed in 2.3.1

    Sources: GCVE · shadowserver, FIRST EPSS, NVD

    Watch CVE-2023-2356 for CVE-2023-2356
  4. CVE-2015-20130exploited since 2026-10-30

    Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php

    Severity mediumEPSS low

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2015-20130 for CVE-2015-20130
  5. CVE-2010-20125exploited since 2026-10-30

    DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php

    Severity highEPSS low

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2010-20125 for CVE-2010-20125
  6. CVE-2025-70795exploited since 2026-10-29

    Severity mediumEPSS low

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2025-70795 for CVE-2025-70795
  7. CVE-2019-9041exploited since 2026-10-29

    Severity highEPSS high

    Sources: GCVE · shadowserver, FIRST EPSS, NVD

    Watch CVE-2019-9041 for CVE-2019-9041
  8. CVE-2026-115886exploited since 2026-10-29

    MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

    Severity mediumEPSS lowFixed in 3.17.0

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2026-115886 for CVE-2026-115886
  9. CVE-2021-35941exploited since 2026-10-29

    Severity highEPSS high

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2021-35941 for CVE-2021-35941
  10. CVE-2021-3006exploited since 2026-10-29

    Severity highEPSS medium

    Sources: GCVE · previdian, FIRST EPSS, NVD

    Watch CVE-2021-3006 for CVE-2021-3006

19 more CVEs qualified this week; an issue keeps the first 20.

Get the brief every Monday

One email a week, unsubscribe in one click. We first send a link to confirm the address.