Advisories
Actively exploited vulnerabilities (CISA KEV) and the daily Vulnerability Watch.

BreakingONLYOFFICE Docs flaw CVE-2021-3199 is being actively exploited, CISA warns
CISA added the ONLYOFFICE Docs vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

BreakingStrapi flaw CVE-2023-22894 is being actively exploited, CISA warns
CISA added the Strapi vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.

Vulnerability Watch, October 8, 2026: 22 critical CVEs and 50 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 7, 2026: 4 critical CVEs and 41 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 6, 2026: 3 critical CVEs and 29 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 5, 2026: 5 critical CVEs and 2 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

BreakingCitrix NetScaler flaw CVE-2026-88779 is being actively exploited, CISA warns
CISA added the Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on October 4, 2026, with a federal remediation deadline of October 7, 2026.

Vulnerability Watch, October 4, 2026: 2 critical CVEs and 2 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

Vulnerability Watch, October 3, 2026: 8 critical CVEs and 28 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.

BreakingZammad GmbH Zammad flaw CVE-2026-102489 is being actively exploited, CISA warns
CISA added the Zammad GmbH Zammad vulnerability to its Known Exploited Vulnerabilities catalog on October 2, 2026, with a federal remediation deadline of October 5, 2026.