The InfoSec Tribune

Verified, source linked news. Every story carries its primary source.

CVE Watch

Staging board from the Sprint 1 KEV ingest spike. Sorted by date added, newest first.

CVEHeadlineAddedDueRansomware use
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability2026-10-232026-10-26Unknown
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability2026-10-232026-10-26Unknown
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element Vulnerability2026-10-202026-11-03Unknown
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability2026-10-202026-11-03Unknown
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability2026-10-202026-10-23Unknown
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability2026-10-202026-11-03Unknown
CVE-2026-96656Plex Media Server External Control of File Name or Path Vulnerability2026-10-202026-10-23Unknown
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability2026-10-202026-10-23Unknown
CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability2026-10-162026-10-19Unknown
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability2026-10-162026-10-19Unknown
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability2026-10-152026-10-18Unknown
CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability2026-10-142026-10-17Unknown
CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability2026-10-142026-10-17Unknown
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability2026-10-142026-10-17Unknown
CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability2026-10-142026-10-17Unknown
CVE-2026-96951Microsoft Windows Command Injection Vulnerability2026-10-132026-10-16Unknown
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability2026-10-132026-10-16Unknown
CVE-2015-3306ProFTPD Improper Access Control Vulnerability2026-10-082026-10-11Unknown
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability2026-10-082026-10-11Unknown
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability2026-10-082026-10-11Unknown
CVE-2016-3081Apache Struts Command Injection Vulnerability2026-10-082026-10-11Unknown
CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability2026-10-082026-10-11Unknown
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-10-042026-10-07Unknown
CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability2026-10-022026-10-05Unknown
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-022026-10-05Unknown
CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability2026-10-012026-10-04Unknown
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-302026-10-03Unknown
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability2026-09-292026-10-13Unknown
CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability2026-09-272026-09-30Unknown
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-09-272026-09-30Unknown
CVE-2026-87902WordPress Core Remote File Inclusion Vulnerability2026-09-252026-09-28Unknown
CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability2026-09-252026-09-28Unknown
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-252026-09-28Unknown
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability 2026-09-242026-09-27Unknown
CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability 2026-09-242026-09-27Unknown
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation Vulnerability2026-09-222026-09-25Unknown
CVE-2026-93616Check Point Multiple Products Path Traversal Vulnerability2026-09-222026-09-25Unknown
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability2026-09-222026-09-25Unknown
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation Vulnerability2026-09-222026-09-25Unknown
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability2026-09-212026-09-24Unknown
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability2026-09-182026-09-21Unknown
CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability2026-09-182026-09-21Unknown
CVE-2025-39964Linux Kernel Race Condition Vulnerability2026-09-182026-09-21Unknown
CVE-2026-87886Acronis Backup Incorrect Default Permissions Vulnerability2026-09-162026-09-19Unknown
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability2026-09-162026-09-19Unknown
CVE-2026-58704Google Pixel Improper Authorization Vulnerability2026-09-162026-09-19Unknown
CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability2026-09-142026-09-17Unknown
CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability2026-09-112026-09-14Unknown
CVE-2026-42018JFrog Artifactory Improper Authentication Vulnerability2026-09-112026-09-25Unknown
CVE-2026-42016JFrog Artifactory Incorrect Authorization Vulnerability2026-09-112026-09-25Unknown