Our weekly CVE report for Oct 26-Nov 1, 2026 tracks 3,734 new CVEs and 15 exploited vulnerabilities, including Oracle EBS flaws not in CISA KEV. Related Posts: Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report The post Weekly CVE Report Finds Oracle EBS, YOOtheme and FreeSWITCH Attacks Missing From CISA KEV a

FreeSWITCH vulnerability CVE-2026-116779 (CVSS 9.8) is exploited in the wild, letting a SIP MESSAGE run server commands. Upgrade to 1.11.3 now. Related Posts: Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8) The post FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild t