Vigilbase CVEConnect your agent
Live · Vendor changelogs checked

Is it blocked at the edge yet?

Which WAFs block each exploited CVE, and since when. Quoted from vendor changelogs, tested in our lab, and one prompt away from your agent.

1,766
Exploited CVEs
982
With a WAF rule
1,610
Vendor quotes
386/527
No rule yet (2025+)
Built for agents

Give your agent the context

One prompt for Claude Code, Cursor, Codex or any MCP client.

Connect to the Vigilbase CVE MCP server (https://cve.vigilbase.com/mcp, streamable HTTP, no key needed) and use it for vulnerability triage:
1. Scan my lockfiles with scan_dependencies and list the vulnerable packages, exploited-in-the-wild CVEs first, then ones with public exploit code.
2. For each of those CVEs, call get_cve_coverage: tell me whether my WAF vendor claims a rule, whether it blocks by default, and what Vigilbase's own lab test measured.
3. Run check_exposure for my domain on the top CVEs.
4. Give me a prioritised fix list with the fixed versions, and cite the source URLs the server returns.
scan_dependenciesget_cve_coveragecheck_exposurelist_trendingsearch_cveslist_new_rulescompare_vendorsget_waf_benchmarklist_exploited_gapsget_scan_stats

Live activity

Live
  • CVE Alerts CVE-2026-28588
    CVE-2026-28588 - Android ExternalStorageProvider Logic Error Privilege Escalation CVE ID : CVE-2026-28588 Published : Nov. 2, 2026, 8:17 p.m. | 46 minutes ago Description : In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access...
  • ExploitBench CVE-2026-98432
    CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake (IPv6 not hit by the main issue). CVSS 9.8 from the kernel CNA; NVD hasn't analysed it yet. Not on CISA KEV (2026.10.30). Fixed in stable 6.6.159, 6.12.113, 6.18.56, 7.2.10. https://t.co/axObV10tw3
  • Jonathan Cecil CVE-2026-98432
    Ubuntu has not released a patch for a Linux 0-day remote code execution flaw in LTS kernels after nearly three weeks (CVE-2026-98432). https://t.co/XDyDOQuR63
  • New exploit repo CVE-2026-62911
    c5z54/cve-2026-62911-poc: CVE-2026-62911 — Exchange MRSProxy Pre-Auth RCE PoC | Scanner + Exploit | NTLM Relay → Webshell → SYSTEM
  • YogiBear_XRP CVE-2026-109618
    Why I’m holding the launch of the application: Since PHP2Shell (CVE-2026-109618 / CVE-2026-109619) was disclosed and patched around October 20–21, the active threat environment has been elevated. Confirmed real-world PHP2Shell activity so far has been limited (no widespread mass
  • YogiBear_XRP CVE-2026-109619
    Why I’m holding the launch of the application: Since PHP2Shell (CVE-2026-109618 / CVE-2026-109619) was disclosed and patched around October 20–21, the active threat environment has been elevated. Confirmed real-world PHP2Shell activity so far has been limited (no widespread mass
  • TheHackerWire CVE-2026-91893
    🟠 CVE-2026-91893 - High (7.8) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege ... https://www.thehackerwire.com/vulnerability/CVE-2026-91893/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
  • TheHackerWire CVE-2026-91898
    🟠 CVE-2026-91898 - High (8.1) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verificati... https://www.thehackerwire.com/vulnerability/CVE-2026-91898/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
  • TheHackerWire CVE-2026-29508
    🟠 CVE-2026-29508 - High (8.8) ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow... https://www.thehackerwire.com/vulnerability/CVE-2026-29508/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
  • TheHackerWire CVE-2026-91893
    🟠 CVE-2026-91893 - High (7.8) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.…
  • TheHackerWire CVE-2026-91898
    🟠 CVE-2026-91898 - High (8.1) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, le.…
  • TheHackerWire CVE-2026-29508
    🟠 CVE-2026-29508 - High (8.8) ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value tha.…
  • Nurhayat Yurtaslan CVE-2026-77876
    🚨 CWP CVE-2026-77876: unauthenticated command injection in protected_directory (CVSS 3.1:9.8). Exploitation unconfirmed. Version conflict: CNA says <1.16; CWP lists user-panel hardening in 1.27. Update to 1.30; verify. https://t.co/Wu8rQZWckD https://t.co/E421vKiHPg https://t…
  • Aretiq.AI CVE-2026-73696
    ARETIQ Daily Vulnerability Bulletin — November 02, 2026 🔴 CRITICAL: CVE-2026-73696 (control_web_panel/control_web_panel) AAS 12.0 13 vulnerabilities — CRITICAL: 1, HIGH: 12 Full bulletin: https://t.co/UPQfNEQzHv
VulnerabilityExploitedCVSSCloudflareCFAWSAWSAzureAzureGoogleGoogleFastlyFastlyF5F5AkamaiAkam.CRSCRS
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CVE-2026-118527
2026-10-30—
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CVE-2026-111357
2026-10-307.0
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
CVE-2026-97229
2026-10-2910.0
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
CVE-2026-76418
2026-10-298.6
Linux Kernel Missing Initialization of a Variable Vulnerability
CVE-2026-46300
2026-10-287.8
Broadcom VMWare ESX Insufficient Logging Vulnerability
CVE-2026-41709
2026-10-282.7
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
CVE-2026-48356
2026-10-279.3
Google Brotli Unchecked Return Value Vulnerability
CVE-2026-111497
2026-10-279.2Logs+3dRule+4d
PHP Stale Internal Request-State Vulnerability
CVE-2026-109619
2026-10-269.2BlocksRule+0dRule+0dRule+0d
PHP Memory Corruption Vulnerability
CVE-2026-109618
2026-10-269.2BlocksRule+0dRule+0dRule+0d
Arista VeloCloud Orchestrator SQL Injection Vulnerability
CVE-2026-114625
2026-10-239.4
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVE-2026-110447
2026-10-239.2
Plex Media Server External Control of File Name or Path Vulnerability
CVE-2026-96656
2026-10-208.6
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96655
2026-10-205.3
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
CVE-2026-96654
2026-10-206.9
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96652
2026-10-205.3
Siemens Software Center Uncontrolled Search Path Element Vulnerability
CVE-2026-110936
2026-10-208.4
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVE-2026-106931
2026-10-208.5
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
CVE-2026-102764
2026-10-169.3
Fortinet Multiple Products Path Traversal Vulnerability
CVE-2025-61624
2026-10-165.4
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-21589
2026-10-159.3Blocks+7dRule+2dRule+16d
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
CVE-2026-76519
2026-10-149.8
Ahsay AhsayCBS Command Injection Vulnerability
CVE-2026-105134
2026-10-1410.0Rule+17d
Ahsay AhsayCBS Improper Authentication Vulnerability
CVE-2026-105133
2026-10-146.9Rule+17d
Palo Alto Networks PAN-OS Code Injection Vulnerability
CVE-2026-0322
2026-10-148.6
Microsoft Windows Command Injection Vulnerability
CVE-2026-96951
2026-10-138.8
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2026-104935
2026-10-138.6Rule+8d
Strapi Cleartext Storage of Sensitive Information Vulnerability
CVE-2023-22894
2026-10-087.2
ONLYOFFICE Docs Server Path Traversal Vulnerability
CVE-2021-3199
2026-10-089.8
Apache Struts Command Injection Vulnerability
CVE-2016-3081
2026-10-088.1
ISC BIND Data Processing Errors Vulnerability
CVE-2015-5477
2026-10-087.5
ProFTPD Improper Access Control Vulnerability
CVE-2015-3306
2026-10-0810.0
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
CVE-2026-88779
2026-10-048.7
Zammad GmbH Zammad Improper Privilege Management Vulnerability
CVE-2026-102490
2026-10-028.5
Zammad GmbH Zammad Session Fixation Vulnerability
CVE-2026-102489
2026-10-028.7Rule+21d
Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-104286
2026-10-019.8
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
CVE-2026-76504
2026-09-309.8Rule+21d
Apple Multiple Products Out-of-Bounds Write Vulnerability
CVE-2026-86950
2026-09-298.8
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
CVE-2026-88772
2026-09-279.5
Citrix NetScaler Improper Input Validation Vulnerability
CVE-2026-88771
2026-09-279.5Blocks+4dRule+24d
WordPress Core Remote File Inclusion Vulnerability
CVE-2026-87902
2026-09-258.1Blocks+3dRule+29d
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
CVE-2026-67279
2026-09-256.9
Microsoft SharePoint Code Injection Vulnerability
CVE-2026-65660
2026-09-258.8Rule+71d
Adobe Commerce and Magento Incorrect Authorization Vulnerability
CVE-2026-71362
2026-09-249.1Rule+36d
WSO2 Multiple Products Path Traversal Vulnerability
CVE-2026-5430
2026-09-2410.0Rule+76d
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
CVE-2026-94127
2026-09-229.3Blocks+14d
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
CVE-2026-93952
2026-09-229.5
Check Point Multiple Products Path Traversal Vulnerability
CVE-2026-93616
2026-09-229.8
Check Point Multiple Products Improper Certificate Validation Vulnerability
CVE-2026-85102
2026-09-229.8
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVE-2026-7273
2026-09-218.8
BlocksLogsOffRuleNo public claimBefore feed historyNo public source+Nd: first rule N days after the CVE was published

From knowing to protected

This site is free. When you want it handled, Vigilbase does the work.

Vigilbase Shield

Get vendor rules like these in front of your site.

Managed Cloudflare WAF and DDoS protection on a monthly plan, run by our team.

See Shield plans
Vigilbase OS

Know the day a CVE reaches your stack, and close it.

Connects the security tools you already pay for. Vigil investigates, makes the fixes you authorise and verifies them.

Get started
Cloudflare Checkup

Already on Cloudflare? See how it is set up.

Free review of your Cloudflare configuration, with a read-only API token.

Run a free checkup