Loading feed…
Updated
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert CSO Online CVE-2026-102764 is confirmed as exploited in the wild (US known-exploited catalogue) CVE-2026-102764 has an…
Next step: Confirm whether BeyondTrust Remote Support is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
CVE-2026-94127 has an estimated attack likelihood score of 0.249 (~24.9% estimated chance of exploitation in the next 30 days; 97.9th percentile) as of 2026-10-25.
Next step: Confirm whether F5 BIG-IP Access Policy Manager is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Pasquale Pillitteri CVE-2026-0322 is confirmed as exploited in the wild (US known-exploited catalogue) CVE-2026-0322 has an estimated…
Next step: Confirm whether Palo Alto Networks PAN-OS is in your estate.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
A vulnerability in SolarWinds Serv-U has an estimated 43.7% chance of exploitation in the next 30 days according to estimated attack likelihood data. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether SolarWinds Serv-u is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
Plex Media Server contains an improper neutralisation of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters.
Next step: Confirm whether Plex Media Server is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 4Vendor statement missing. no VendorResearcher coverage missing. no Researcher4 signals
Only official coverage so far. Treat as an early signal.
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
Next step: Confirm whether Cisco Secure Email Gateway Virtual Appliance C100v is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
The UK National Cyber Security Centre has launched the Cyber Adversary Simulation (CyAS) scheme, making scheme documents available to organisations.
CVE-2026-56164 has an estimated attack likelihood score of 0.273 (~27.3% estimated chance of exploitation in the next 30 days; 98.1th percentile) as of 2026-11-12.
D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. Known-exploited catalogue reports exploitation in the wild.
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. Known-exploited catalogue reports exploitation in the wild.
This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. Known-exploited catalogue reports exploitation in the wild.
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorised remote administrative access to the device. Known-exploited catalogue reports exploitation in the wild.
Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. Known-exploited catalogue reports exploitation in the wild.
Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code. Known-exploited catalogue reports exploitation in the wild.
A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to…
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. Known-exploited catalogue reports exploitation in the wild.
Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.
Android Framework contains an unspecified vulnerability that allows for information disclosure. Known-exploited catalogue reports exploitation in the wild.
Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution. Known-exploited catalogue reports exploitation in the wild.
Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using?inline&import or?raw?import. Known-exploited catalogue reports exploitation in the wild.
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive…
Confirm whether Cisco Broadworks Application Delivery Platform is in your estate.
all High · vulnerabilities · exploited in the wild