$ vulnerability-intelligence --current
Vulnerability news.
Exploitation context.
Follow sourced security reporting, check a CVE against exploited-vulnerability catalogs, and browse the products affected. Start with an identifier or a product you manage.
$ latest from the desk
All articles →
Latest intelligence
all articles →
Explore exploited products
Products with multiple CVEs in our dataset and at least one CISA Known Exploited Vulnerabilities listing. Open a product to compare its tracked CVEs and source records.
Known Exploited Vulnerabilities
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. CISA notes it can be chained with other Ivanti Connect Secure flaws.
Cisco ASA/FTD SSL VPN Secondary Auth Logic Error Enables Remote DoS
Logic errors in Cisco ASA/FTD SSL VPN secondary authentication let unauthenticated remote attackers reload the firewall, causing a denial-of-service condition.
Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Linux Kernel Missing Initialization of a Variable Vulnerability
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.
Google Brotli Unchecked Return Value Vulnerability
Google Brotli decoder memory corruption via crafted stream. Unauthenticated RCE potential. Ships in Node.js, PHP, Python, .NET, Bun. CISA KEV added October 27, 2026.
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Adobe Commerce/Magento unrestricted file upload (CVSS 9.3). Unauthenticated RCE. Actively exploited by PolyShell since July 2025. CISA KEV added October 27, 2026.
Latest security news
Adobe Patches 8 Critical Campaign Classic Flaws
Adobe patched eight critical flaws in Campaign Classic 7.4.4 build 9402, including a CVSS 10.0 SQL injection. Build 9403 is available now; no active exploitation reported.
CISA Adds Adobe Commerce, Brotli to KEV After Active Attacks
CISA added CVE-2026-48356 and CVE-2026-111497 to its KEV catalog as PolyShell attacks breach hundreds of Adobe Commerce and Magento stores.
Oracle EBS SQL Injection Probed 24 Hours After Patch
Threat actors began probing Oracle EBS CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection, one day after Oracle's October 2026 CPU released the fix.
Oracle PeopleSoft CVE Was Three Chained Flaws, ZDI Shows
ZDI discloses CVE-2026-35273 chains an SSRF, a trust bypass, and two RCE paths. One CVE ID, two persistence mechanisms, and active exploitation since May.
GMO Group Orders Cloud Shutdown After Ransomware Threat
GMO Group told Onamae Desktop Cloud customers to disconnect and shut down PCs after a threat actor who breached the service threatened a ransomware deployment.
Tailscale SSH Flaws Exposed Before Patches Ready
Nearly a dozen Tailscale SSH vulnerabilities went public before fixes were available. Root privilege escalation and credential theft confirmed as possible impact.