Skip to main content
4 reportsPriority High

November 2026 Patch Tuesday vulnerability updates

A major software update cycle has been released with over 1,000 security flaws addressed, including one unpatched zero-day vulnerability that could be exploited by attackers.

First report Latest

What is going on

  • November 2026 Patch Tuesday included 1,252 CVEs with 68 critical vulnerabilities and one zero-day vulnerability.
  • Security updates were released to address these flaws, with organisations advised to review their software estates to determine if mitigation or patching is required.
  • One zero-day vulnerability was reported to be exploited in the wild, though no specific details about the exploit have been confirmed.
  • The vulnerability landscape remains active with multiple security updates and ongoing monitoring recommended for affected systems.
  • What to watch: Further confirmation of the zero-day's exploitation method and affected systems would change the current understanding of the risk.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed