Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV. Related Posts: This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026) The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing Fr

Horizon3 released details and a PoC for CVE-2026-106173, a FortiSIEM vulnerability enabling unauthenticated remote code execution. Patch now. Related Posts: PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates The post FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw appeared