$ vulnerability-intelligence --current
Vulnerability news.
Exploitation context.
Follow sourced security reporting, check a CVE against exploited-vulnerability catalogs, and browse the products affected. Start with an identifier or a product you manage.
$ latest from the desk
All articles →
Latest intelligence
all articles →
Explore exploited products
Products with multiple CVEs in our dataset and at least one CISA Known Exploited Vulnerabilities listing. Open a product to compare its tracked CVEs and source records.
Known Exploited Vulnerabilities
VeloCloud Orchestrator privilege escalation via SQL injection
A SQL injection flaw in Arista's on-prem VeloCloud Orchestrator lets any authenticated user gain superuser operator privileges, with active exploitation confirmed as of October 22, 2026.
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Siemens Software Center DLL Sideloading via Uncontrolled Search Path
Siemens Software Center before V4.0.9.8 loads DLLs from an uncontrolled search path, allowing a local attacker to execute code with the application's privileges. Exploited in the wild via ClickFix lures.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.
Latest security news
Two CVSS 9.0 RCEs Hit KSMBD, No Kernel Patch Ready
Trend Micro ZDI disclosed two CVSS 9.0 RCEs in Linux's KSMBD SMB server before kernel patches exist. The more severe flaw requires no authentication.
Arista VeloCloud Zero-Day CVE-2026-114625 Exploited
A CVSS 9.9 SQL injection flaw in Arista VeloCloud Orchestrator on-prem is under active attack. Patches are out. Hosted instances are already fixed.
QPACK Flaws Let Attackers Crash HTTP/3 Servers
FoxIO disclosed QPACK header decompression bugs in multiple HTTP/3 stacks. Attackers can trigger up to 4,000x memory amplification from a single connection. Patches are available for quic-go, Cloudflare quiche, and lsquic.
Interpol Arrests 1,462 in Operation Serengeti III
Interpol and 21 African nations disrupted nearly 11,000 malicious networks and arrested 1,462 suspects in a two-month cybercrime sweep targeting BEC, ransomware, and fraud.
Storm-0940 Hits ConnectWise Cloud Backup with AI Attacks
Microsoft linked Storm-0940 to a ConnectWise supply chain compromise using ARTEX, an AI attack tool that ran automated intrusion at machine speed.
GitLab CVSS 10.0 Regex Flaw Hits 12 Years of Releases
CVE-2026-110264 enables unauthenticated RCE on self-managed GitLab servers back to version 7.0. Emergency patches are out; update to a fixed release now.