$ vulnerability-intelligence --current
Vulnerability news.
Exploitation context.
Follow sourced security reporting, check a CVE against exploited-vulnerability catalogs, and browse the products affected. Start with an identifier or a product you manage.
$ latest from the desk
All articles →
Latest intelligence
all articles →
Explore exploited products
Products with multiple CVEs in our dataset and at least one CISA Known Exploited Vulnerabilities listing. Open a product to compare its tracked CVEs and source records.
Known Exploited Vulnerabilities
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CISA notes it can be chained with other Ivanti Connect Secure flaws.
Ivanti Connect Secure Predictable Identifier File Upload
CISA lists an exploited predictable-identifier flaw in Ivanti Connect Secure. A remote authenticated attacker can upload attacker-controlled files to a known location on disk.
Cisco ASA/FTD SSL VPN Secondary Auth Logic Error Enables Remote DoS
Logic errors in Cisco ASA/FTD SSL VPN secondary authentication let unauthenticated remote attackers reload the firewall, causing a denial-of-service condition.
Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Linux Kernel Missing Initialization of a Variable Vulnerability
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.
Google Brotli Unchecked Return Value Vulnerability
Google Brotli decoder out-of-bounds write with remote code execution potential, added to CISA KEV on October 27, 2026.
Latest security news
Android 'SMS of Death' Crash Fix Exists, but Patch Coverage Is Unclear
Google's Android source contains a fix for a remote telephony crash. The October bulletin does not identify the issue, so device patch coverage remains unconfirmed.
Chainalysis Confirms Breach by 'Agentic' Attacker
Chainalysis confirms an external actor reached internal tools and customer contact data using 'offensive agentic techniques'. Entry point and dwell time unconfirmed.
Ivanti Connect Secure Chain Fixes Ship, KEV Due Nov 2
CISA added Ivanti Connect Secure CVE-2026-111357 and CVE-2026-118527 to KEV. Fixes for the full exploited chain are now out in 25.1.1.3 and 22.8R2.6.
FBI Seizes Virtualine Bulletproof Hosting Domain
The FBI seized virtualine.net, a Russian-speaking bulletproof host tied to ransomware and StealC operators. A domain seizure alone does not prove it is offline.
Linux TCP Flaw Allows Remote Root on MPTCP Listeners
Anthropic demonstrated remote root execution through Linux CVE-2026-98432 on MPTCP listeners. Upstream fixes exist; distribution patch status varies.
Drupal Commerce Core Bypass Exploited, Patch 3.3.13
Drupal says CVE-2026-118539, a highly critical Commerce Core access bypass, is exploited in the wild. Update to 3.3.13 or 8.x-2.41 and audit your orders.