Advisories
Actively exploited vulnerabilities (CISA KEV) and the daily Vulnerability Watch.

BreakingMicrosoft Windows flaw CVE-2026-96951 is being actively exploited, CISA warns
CISA added the Microsoft Windows vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.

BreakingIvanti Connect Secure flaw CVE-2026-104935 is being actively exploited, CISA warns
CISA added the Ivanti Connect Secure vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.

Vulnerability Watch, October 13, 2026: 34 critical CVEs and 14 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 12, 2026: 4 critical CVEs and 9 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 11, 2026: 4 critical CVEs and 0 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 10, 2026: 14 critical CVEs and 50 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 9, 2026: 35 critical CVEs and 35 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

ProFTPD flaw CVE-2015-3306 is being actively exploited, CISA warns
CISA added the ProFTPD vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

Apache Struts flaw CVE-2016-3081 is being actively exploited, CISA warns
CISA added the Apache Struts vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

ISC BIND flaw CVE-2015-5477 is being actively exploited, CISA warns
CISA added the ISC BIND vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.