$ vulnerability-intelligence --current
Vulnerability news.
Exploitation context.
Follow sourced security reporting, check a CVE against exploited-vulnerability catalogs, and browse the products affected. Start with an identifier or a product you manage.
$ latest from the desk
All articles →
Latest intelligence
all articles →
Explore exploited products
Products with multiple CVEs in our dataset and at least one CISA Known Exploited Vulnerabilities listing. Open a product to compare its tracked CVEs and source records.
Known Exploited Vulnerabilities
VeloCloud Orchestrator privilege escalation via SQL injection
A SQL injection flaw in Arista's on-prem VeloCloud Orchestrator lets any authenticated user gain superuser operator privileges, with active exploitation confirmed as of October 22, 2026.
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Siemens Software Center DLL Sideloading via Uncontrolled Search Path
Siemens Software Center before V4.0.9.8 loads DLLs from an uncontrolled search path, allowing a local attacker to execute code with the application's privileges. Exploited in the wild via ClickFix lures.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.
Latest security news
BlackX Bootkit Bypasses Secure Boot on Patched Windows 11
APT41's BlackX UEFI bootkit bypassed Secure Boot on patched Windows 11 via CVE-2022-21894. Closing the gap requires manual certificate revocation, not just patching.
Ruby Patches Regex Engine Behind Four Critical GitLab RCEs
Ruby 4.0.9, 3.4.12, and 3.3.13 fix three Onigmo bugs behind four critical GitLab CVEs, including two CVSS 10.0 flaws. Ruby 3.2 reaches end of life with no fix.
Metasploit Ships Six Exploit Modules for Langflow
Rapid7's new Metasploit release adds six modules targeting Langflow, five covering critical RCEs. The worst, CVE-2026-10134, scores a perfect 10.0.
Brotli Decoder Flaw Hits Node.js, Bun, Python: RCE Confirmed
Imperva's Node2Shell PoC achieves RCE on official Node.js via a Brotli decoder memory-corruption flaw. Bun, Python brotli/brotlicffi, and Envoy also affected.
CISA: Collabora and VeloCloud Flaws Hit KEV
CISA added CVE-2026-110447 and CVE-2026-114625 to its KEV catalog on October 23, giving federal agencies until October 26 to patch. Both are confirmed exploited.
AI Agents Ran INC and Gentlemen Ransomware Intrusions
SOCRadar found an exposed server logging 8,257 messages from INC and The Gentlemen affiliates running autonomous AI agent frameworks against 62 organizations.