athorion/kev
ACTIVELY EXPLOITED SOURCE: CISA KEV

KEV of the week

The vulnerabilities attackers are using right now. These are the CVEs most recently added to the CISA Known Exploited Vulnerabilities catalogue - the ones to patch first.

Am I affected? Free check → Updated continuously
MOST RECENTLY ADDED1764 in the KEV catalogue
CVE-2026-97229 GitLab · Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
29 Oct 2026 EPSS 18.4% 10.0 CRIT
CVE-2026-76418 Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
29 Oct 2026 EPSS 0.6% 8.6 HIGH
CVE-2026-41709 Broadcom · VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
28 Oct 2026 EPSS 0.8% 2.7 LOW
CVE-2026-46300 Linux · Kernel
Linux Kernel Missing Initialization of a Variable Vulnerability
28 Oct 2026 EPSS 15.7% 7.8 HIGH
CVE-2026-48356 Adobe · Commerce and Magento
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
27 Oct 2026 EPSS 44.6% 9.3 CRIT
CVE-2026-111497 Google · Brotli
Google Brotli Unchecked Return Value Vulnerability
27 Oct 2026 EPSS 82.6% 9.8 CRIT
CVE-2026-109619 PHP Group · PHP
PHP Stale Internal Request-State Vulnerability
26 Oct 2026 EPSS 100% 8.1 HIGH
CVE-2026-109618 PHP Group · PHP
PHP Memory Corruption Vulnerability
26 Oct 2026 EPSS 100% 9.8 CRIT
CVE-2026-110447 Collabora · Collabora Online – Built-in CODE Server
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
23 Oct 2026 EPSS 73.3% 9.8 CRIT
CVE-2026-114625 Arista · VeloCloud Orchestrator
Arista VeloCloud Orchestrator SQL Injection Vulnerability
23 Oct 2026 EPSS 1% 9.9 CRIT
CVE-2026-96655 Plex · Media Server
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
20 Oct 2026 EPSS 1.6% 4.3 MED
CVE-2026-110936 Siemens · Software Center
Siemens Software Center Uncontrolled Search Path Element Vulnerability
20 Oct 2026 EPSS 1% 6.7 MED
CVE-2026-96652 Plex · Media Server
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
20 Oct 2026 EPSS 1.8% 4.3 MED
CVE-2026-106931 EG Secure Solutions · SiteGuard Server Edition
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
20 Oct 2026 EPSS 2.5% 7.8 HIGH
CVE-2026-96654 Plex · Media Server
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
20 Oct 2026 EPSS 1.9% 6.5 MED
CVE-2026-96656 Plex · Media Server
Plex Media Server External Control of File Name or Path Vulnerability
20 Oct 2026 EPSS 1.8% 7.2 HIGH
CVE-2026-102764 BeyondTrust · Remote Support
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
16 Oct 2026 EPSS 18.9% 9.8 CRIT
CVE-2025-61624 Fortinet · Multiple Products
Fortinet Multiple Products Path Traversal Vulnerability
16 Oct 2026 EPSS 1.3% 6.5 MED
CVE-2026-21589 Atlassian · Multiple Products
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
15 Oct 2026 EPSS 99.5% 7.5 HIGH
CVE-2026-0322 Palo Alto Networks · PAN-OS
Palo Alto Networks PAN-OS Code Injection Vulnerability
14 Oct 2026 EPSS 1.7% 7.2 HIGH
CVE-2026-105134 Ahsay · AhsayCBS
Ahsay AhsayCBS Command Injection Vulnerability
14 Oct 2026 EPSS 81.8% 10.0 CRIT
CVE-2026-76519 Cisco · Secure Email Gateway
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
14 Oct 2026 EPSS 2.2% 9.8 CRIT
CVE-2026-105133 Ahsay · AhsayCBS
Ahsay AhsayCBS Improper Authentication Vulnerability
14 Oct 2026 EPSS 79.5% 7.3 HIGH
CVE-2026-104935 Ivanti · Connect Secure
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
13 Oct 2026 EPSS 86.8% 8.6 HIGH
CVE-2026-96951 Microsoft · Windows
Microsoft Windows Command Injection Vulnerability
13 Oct 2026 EPSS 9.8% 8.8 HIGH
What is KEV?
The CISA Known Exploited Vulnerabilities catalogue lists CVEs with confirmed active exploitation in the wild. If one of these is on your perimeter, it is not theoretical - it is being used.
What is EPSS?
EPSS estimates the probability that a CVE will be exploited in the next 30 days. KEV plus a high EPSS is about as urgent as it gets.
Get the KEV digest every Monday

The week's new actively exploited vulnerabilities in your inbox. Free, one email a week, unsubscribe any time.

✓Almost there - check your inbox and click the confirmation link.

Is one of these on your perimeter?

Enter your domain and we check your external attack surface against known exploited vulnerabilities - free, non-intrusive, no login.

Source: CISA Known Exploited Vulnerabilities (KEV) catalogue, enriched with CVSS (NVD) and EPSS (FIRST) where available. For information only; always verify against the authoritative vendor advisory.