Vulnerabilities
Summary — last 7 days
New vulnerabilities3,594▼ 1,081 vs. last week
Critical / high1,420▼ 1,221 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)703▲ 632 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Critical (9.3) | 1.2% | ⚠ Active exploitationPoC | Beyondtrust Remote Support | 10/15/2026 | 10/17/2026 | The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. | |
| Analyzed | High (8.6) | 1.2% | ⚠ Active exploitationPoC | Paloaltonetworks Pan-os | 10/14/2026 | 10/15/2026 | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management… | |
| Analyzed | Critical (9.8) | 1.6% | ⚠ Active exploitationPoC | Cisco Asyncos | 10/14/2026 | 10/15/2026 | A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An… | |
| Analyzed | High (8.6) | 26% | ⚠ Active exploitationExploit | Ivanti Connect Secure | 10/13/2026 | 10/13/2026 | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. |