Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.

Related Posts:

• This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days
• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)

The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV appeared first on Daily CyberSecurity.

Arista says VeloCloud Orchestrator vulnerability CVE-2026-114625, a CVSS 9.9 SQL injection, is exploited in the wild. Upgrade on-prem VCO now.

Related Posts:

• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
• Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

The post Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild appeared first on Daily CyberSecurity.

An exploited VeloCloud vulnerability with a 10.0 CVSS score hits Arista appliances. Patch the critical VeloCloud vulnerability to stop active attacks.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed
• Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched

The post Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10 appeared first on Daily CyberSecurity.