CVERadar

Newly exploited vulnerabilities

When CISA adds a CVE to its Known Exploited Vulnerabilities catalog, it has evidence that attackers are using the flaw. These are the latest additions on CVERadar, newest first: 7 in the 7 days before the last data run, 33 in the last 30. CVERadar pulls the KEV feed on every data run (twice a day), so a new entry shows up here the same day CISA publishes it. Data as of Wed, 04 Nov 2026 04:42:18 GMT.

1 added

2 added

  • CVE-2026-111357 Ivanti Connect Secure · high 7 · federal due date 2026-11-02
  • CVE-2026-118527 Ivanti Connect Secure · medium 4.3 · federal due date 2026-11-13

2 added

  • CVE-2026-97229 GitLab Community Edition and Enterprise Edition · critical 10 · federal due date 2026-11-01
  • CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software · high 8.6 · federal due date 2026-11-01

2 added

  • CVE-2026-46300 Linux Kernel · high 7.8 · federal due date 2026-10-31
  • CVE-2026-41709 Broadcom VMware ESX · low 2.7 · federal due date 2026-11-11

2 added

  • CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli ve… · critical 9.2 · federal due date 2026-11-10
  • CVE-2026-48356 Adobe Commerce and Magento · critical 9.3 · federal due date 2026-11-10

2 added

2 added

  • CVE-2026-110447 Collabora Online – Built-in CODE Server · critical 9.2 · federal due date 2026-10-26
  • CVE-2026-114625 Arista VeloCloud Orchestrator · critical 9.4 · federal due date 2026-10-26

6 added

  • CVE-2026-96656 Plex Media Server · high 8.6 · federal due date 2026-10-23
  • CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition · high 8.5 · federal due date 2026-10-23
  • CVE-2026-110936 Siemens Software Center · high 8.4 · federal due date 2026-11-03
  • CVE-2026-96654 Plex Media Server · medium 6.9 · federal due date 2026-10-23
  • CVE-2026-96652 Plex Media Server · medium 5.3 · federal due date 2026-11-03
  • CVE-2026-96655 Plex Media Server · medium 5.3 · federal due date 2026-11-03

2 added

  • CVE-2026-102764 BeyondTrust Remote Support · critical 9.3 · federal due date 2026-10-19
  • CVE-2025-61624 Fortinet Multiple Products · medium 6.5 · federal due date 2026-10-19

1 added

  • CVE-2026-21589 Atlassian Multiple Products · critical 9.3 · federal due date 2026-10-18

4 added

  • CVE-2026-105134 AhsayCBS · critical 9.3 · federal due date 2026-10-17
  • CVE-2026-105133 AhsayCBS · medium 5.5 · federal due date 2026-10-17
  • CVE-2026-76519 Cisco Secure Email Gateway · critical 9.8 · federal due date 2026-10-17
  • CVE-2026-0322 Palo Alto Networks PAN-OS · high 8.6 · federal due date 2026-10-17

2 added

  • CVE-2026-104935 Ivanti Connect Secure · high 8.6 · federal due date 2026-10-16
  • CVE-2026-96951 Microsoft Windows · high 8.8 · federal due date 2026-10-16

5 added

  • CVE-2015-3306 ProFTPD · critical 10 · federal due date 2026-10-11
  • CVE-2016-3081 Apache Struts · high 8.1 · federal due date 2026-10-11
  • CVE-2015-5477 ISC BIND · high 7.5 · federal due date 2026-10-11
  • CVE-2021-3199 ONLYOFFICE Docs · critical 9.8 · federal due date 2026-10-11
  • CVE-2023-22894 Strapi · medium 4.9 · federal due date 2026-10-11

Older entries: every KEV-listed CVE on the site is in CVEs exploited in the wild; the full catalog is on cisa.gov.