Friday, November 13, 2026
Translate
PrivacySubmit newsShare your story Newsletter Advertise
Breaking

Known Exploited Vulnerabilities

CVE-2026-123039, CVSS 7.8 High, US federal deadline November 16, 2026, CISA KEV

Check Point Multiple Products flaw CVE-2026-123039 is being actively exploited, CISA warns

CISA added the Check Point Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on November 13, 2026, with a federal remediation deadline of November 16, 2026.

United StatesCISA
CVE-2026-102895, CVSS 9.8 Critical, US federal deadline November 12, 2026, CISA KEV

BreakingGPUStack flaw CVE-2026-102895 is being actively exploited, CISA warns

CISA added the GPUStack vulnerability to its Known Exploited Vulnerabilities catalog on November 9, 2026, with a federal remediation deadline of November 12, 2026.

United StatesCISA
Top 10 vulnerabilities, 3 actively exploited, Nov 3–9, 2026

Top 10 vulnerabilities of the week (Nov 3–9, 2026): 3 actively exploited

This week's 10 most urgent vulnerabilities, including 3 CISA confirmed as actively exploited, ranked from CISA and NIST data.

United StatesCISA
CISA BOD 26-04 Sets Three-Day Deadline for Critical Flaws. Source: Rapid7

CISA BOD 26-04 Sets Three-Day Deadline for Critical Flaws

CISA's Binding Operational Directive 26-04 introduces a dynamic remediation model requiring rapid patching and concurrent forensics for high-risk vulnerabilities.

United StatesRapid7
CVE-2026-119977, CVSS 8.1 High, US federal deadline November 6, 2026, CISA KEV

BreakingWordPress Core flaw CVE-2026-119977 is being actively exploited, CISA warns

CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on November 3, 2026, with a federal remediation deadline of November 6, 2026.

United StatesCISA
Top 10 vulnerabilities, 10 actively exploited, Oct 27–Nov 2, 2026

Top 10 vulnerabilities of the week (Oct 27–Nov 2, 2026): 10 actively exploited

This week's 10 most urgent vulnerabilities, including 10 CISA confirmed as actively exploited, ranked from CISA and NIST data.

United StatesCISA
CVE-2026-111357, CVSS 7 High, US federal deadline November 2, 2026, CISA KEV

BreakingIvanti Connect Secure flaw CVE-2026-111357 is being actively exploited, CISA warns

CISA added the Ivanti Connect Secure vulnerability to its Known Exploited Vulnerabilities catalog on October 30, 2026, with a federal remediation deadline of November 2, 2026.

United StatesCISA
Top 10 vulnerabilities, 8 actively exploited, Oct 20–26, 2026

Top 10 vulnerabilities of the week (Oct 20–26, 2026): 8 actively exploited

This week's 10 most urgent vulnerabilities, including 8 CISA confirmed as actively exploited, ranked from CISA and NIST data.

United StatesCISA
CVE-2026-106931, CVSS 8.5 High, US federal deadline October 23, 2026, CISA KEV

BreakingCISA warns CVE-2026-106931 is being actively exploited

CISA added the EG Secure Solutions SiteGuard Server Edition vulnerability to its Known Exploited Vulnerabilities catalog on October 20, 2026, with a federal remediation deadline of October 23, 2026.

United StatesCISA
Top 10 vulnerabilities, 9 actively exploited, Oct 13–19, 2026

Top 10 vulnerabilities of the week (Oct 13–19, 2026): 9 actively exploited

This week's 10 most urgent vulnerabilities, including 9 CISA confirmed as actively exploited, ranked from CISA and NIST data.

United StatesCISA