Our weekly CVE report for Oct 26-Nov 1, 2026 tracks 3,734 new CVEs and 15 exploited vulnerabilities, including Oracle EBS flaws not in CISA KEV.

Related Posts:

• Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV
• This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days
• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

The post Weekly CVE Report Finds Oracle EBS, YOOtheme and FreeSWITCH Attacks Missing From CISA KEV appeared first on Daily CyberSecurity.

Brotli vulnerability CVE-2026-111497 affected products list: fixes for Node.js, .NET, Envoy, PAN-OS and distros, plus VMware and others still unpatched.

Related Posts:

• Critical MediaTek Vulnerabilities Patched in Chipsets
• Public PoC Exploit Disclosed for Linux Kernel Bonding Vulnerability
• Critical FreePBX Vulnerabilities Patched in User Manager

The post Brotli Vulnerability Affected Products: Vendor Patch Status List appeared first on Daily CyberSecurity.

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

Related Posts:

• Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes
• Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access
• FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands

The post CISA Adds Linux Kernel Flaw Chained With PHP2Shell and VMware ESX Bug to KEV appeared first on Daily CyberSecurity.

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0

The post CISA Adds Adobe Magento and Google Brotli Flaws to KEV Catalog appeared first on Daily CyberSecurity.

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones
• HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)

The post CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface appeared first on Daily CyberSecurity.

Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.

Related Posts:

• This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days
• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)

The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV appeared first on Daily CyberSecurity.

Our weekly CVE report for Oct 12-18, 2026 tracks 5,499 new flaws and 12 exploited vulnerabilities, with CISA KEV trailing by up to 8 days.

Related Posts:

• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)
• Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

The post This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days appeared first on Daily CyberSecurity.

Our Q3 2026 CVE report tracks 100 new CISA KEV catalog flaws, up 33%. Microsoft leads, and 26% were exploited within a week of disclosure.

Related Posts:

• State of Exploited Vulnerabilities — Q2 2026

The post Q3 2026 CVE Report Shows 100 New CISA KEV Additions as Exploitation Speeds Up appeared first on Daily CyberSecurity.

Our weekly CVE report for Oct 5-11, 2026 tracks 3,255 new flaws and six exploited vulnerabilities not yet listed in the CISA KEV catalog.

Related Posts:

• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)
• Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
• Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs

The post Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report appeared first on Daily CyberSecurity.

Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.

Related Posts:

• Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
• Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

The post Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026) appeared first on Daily CyberSecurity.

Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.

Related Posts:

• Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed
• Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution
• Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

The post FortiMail Path Traversal Flaw CVE-2026-104286 Exploited in the Wild appeared first on Daily CyberSecurity.

CVE Alerts turns CVE, KEV, and EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial.

Related Posts:

• CVE Watchtower Launches Enterprise Automation Suite Featuring 30-Day Intelligence Dashboards, Predictive EPSS Scoring, REST API, and ITSM Webhooks
• Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response
• Important Update: Vulnerability Articles Now Exclusive to Supporters

The post Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams appeared first on Daily CyberSecurity.

This weekly CVE report tracks 2,825 new flaws and 9 exploited vulnerabilities, verified against CISA KEV. WordPress, F5, Citrix and Check Point lead.

Related Posts:

• Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
• Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws

The post Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026) appeared first on Daily CyberSecurity.

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed

The post Exploited Zyxel Switch Vulnerability Added to CISA KEV appeared first on Daily CyberSecurity.

This weekly CVE report tracks 4,378 new flaws and 10 exploited vulnerabilities, checked against the live CISA KEV catalog. See which bugs to patch first.

Related Posts:

• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
• Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws
• Weekly CVE Report: 11 Exploited Flaws Added to KEV

The post Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs appeared first on Daily CyberSecurity.

CISA warned of exploited Linux kernel vulnerabilities in the KEV catalog. Patch these Linux kernel vulnerabilities to block privilege escalation.

Related Posts:

• FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
• Critical IBM Guardium Vulnerabilities Need Immediate Patching
• Critical MongoDB Driver Vulnerabilities Require Immediate Patching

The post Linux Kernel Vulnerabilities Exploited in the Wild appeared first on Daily CyberSecurity.