The 7 vulnerabilities from the past week with the strongest evidence of real-world attack, ranked by that evidence first and the likelihood of exploitation second. 3 are confirmed or reported exploited in the wild. 3 affect AI systems or tools.
-
CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527. (CISA)
- Exploited in the wild: listed by CISA on Oct 30; US federal agencies must fix it by Nov 2.
- VulnCheck KEV: reported exploited (listed Oct 16), 2 reports. 14 days before CISA. First report: nvd.nist.gov.
- Likelihood (EPSS): 0.32% chance of exploitation activity in the next 30 days, higher than 25% of all CVEs.
- CISA assessment (SSVC): exploitation seen; not easily automated; total control of the affected system.
What to do (CISA): Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk guidance and CISA’s “Forensics Triage Requirements”. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Our analysis: what it is and how to fix it · NVD record and vendor links
-
CVE-2026-103039
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unrestricted global maybe_unserialize() rather than the plugin's own hardened GFCommon::maybe_unseriali… (NVD, CVSS 9.8)
- VulnCheck KEV: reported exploited (listed Oct 30), 1 report. First report: patchstack.com. Not yet in CISA’s catalog.
- Likelihood (EPSS): 0.51% chance of exploitation activity in the next 30 days, higher than 43% of all CVEs.
- CISA assessment (SSVC): no exploitation known; attacks can be automated; total control of the affected system.
Our analysis: what it is and how to fix it · NVD record and vendor links
-
CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357. (CISA)
- Exploited in the wild: listed by CISA on Oct 30; US federal agencies must fix it by Nov 13.
- VulnCheck KEV: reported exploited (listed Oct 30), 1 report. First report: www.cisa.gov.
What to do (CISA): Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk guidance and CISA’s “Forensics Triage Requirements”. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
-
CVE-2026-93680 AI system
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. (NVD, CVSS 9.8)
- Likelihood (EPSS): 2.3% chance of exploitation activity in the next 30 days, higher than 83% of all CVEs.
- CISA assessment (SSVC): no exploitation known; attacks can be automated; total control of the affected system.
Our analysis: what it is and how to fix it · NVD record and vendor links
-
CVE-2026-104339 AI system
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. (NVD, CVSS 9.8)
- Likelihood (EPSS): 0.75% chance of exploitation activity in the next 30 days, higher than 55% of all CVEs.
- CISA assessment (SSVC): no exploitation known; attacks can be automated; total control of the affected system.
Our analysis: what it is and how to fix it · NVD record and vendor links
-
CVE-2026-110186 AI system
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation. (NVD, CVSS 9.8)
- Likelihood (EPSS): 0.62% chance of exploitation activity in the next 30 days, higher than 50% of all CVEs.
- CISA assessment (SSVC): no exploitation known; attacks can be automated; total control of the affected system.
Our analysis: what it is and how to fix it · NVD record and vendor links
-
CVE-2026-119706
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named_tensors, which ForkingPickler.loads deserializes without validation, executing… (NVD, CVSS 9.8)
- CISA assessment (SSVC): proof-of-concept public; attacks can be automated; total control of the affected system.
How we rank
Evidence that attackers are using a flaw comes first: CISA’s Known Exploited Vulnerabilities catalog, VulnCheck KEV and CISA’s own SSVC assessment. Then the likelihood of attack in the next 30 days from FIRST’s Exploit Prediction Scoring System (EPSS), then severity. A high severity score alone doesn’t make the list. Flaws in AI systems and agent tools are weighted up because they are a fast-growing target. Everything here comes straight from those sources; nothing is estimated by us.
EPSS scores are from FIRST.org. Exploitation reports marked VulnCheck KEV are from VulnCheck’s Known Exploited Vulnerabilities catalog (data © VulnCheck). Always confirm the fixed version in the vendor’s advisory.
