Vigilbase CVEConnect your agent
Live · Vendor changelogs checked

Is it blocked at the edge yet?

Which WAFs block each exploited CVE, and since when. Quoted from vendor changelogs, tested in our lab, and one prompt away from your agent.

1,766
Exploited CVEs
982
With a WAF rule
1,610
Vendor quotes
386/527
No rule yet (2025+)
Built for agents

Give your agent the context

One prompt for Claude Code, Cursor, Codex or any MCP client.

Connect to the Vigilbase CVE MCP server (https://cve.vigilbase.com/mcp, streamable HTTP, no key needed) and use it for vulnerability triage:
1. Scan my lockfiles with scan_dependencies and list the vulnerable packages, exploited-in-the-wild CVEs first, then ones with public exploit code.
2. For each of those CVEs, call get_cve_coverage: tell me whether my WAF vendor claims a rule, whether it blocks by default, and what Vigilbase's own lab test measured.
3. Run check_exposure for my domain on the top CVEs.
4. Give me a prioritised fix list with the fixed versions, and cite the source URLs the server returns.
scan_dependenciesget_cve_coveragecheck_exposurelist_trendingsearch_cveslist_new_rulescompare_vendorsget_waf_benchmarklist_exploited_gapsget_scan_stats

Live activity

Live
  • Cybercave Technologies, LLC CVE-2026-98432
    This week: ask whoever runs your web server, in writing, whether the CVE-2026-98432 fix is in and the server restarted. Heard back? Reply and tell us. Want to learn how to check your server, test backups and guard IT tools? Check out our guides here: https://t.co/0IhWkxy6Ke
  • Builder Brief CVE-2026-98432
    Still no Ubuntu kernel fix for CVE-2026-98432, the Linux bug Claude wrote a root exploit for. Debian has one. On an Ubuntu VPS? I wouldn't just wait. Turn off multipath TCP if you don't use it and ask your host for their plan. https://t.co/grw7YKOrDv
  • nichu42 CVE-2026-98432
    Reaffirming its commitment to enterprise-grade stability, Canonical announced Monday that CVE-2026-98432, the critical use-after-free in the Linux kernel's IPv4 TCP code, will receive a full 10 years of Long-Term Support on every Ubuntu release it affects. "Other distros will p…
  • The Hacker Wire CVE-2026-77876
    🚨 CVE-2026-77876 & 73696 (CVSS 9.8 Critical) - PoC Active Execution After Redirect auth bypass in Control Web Panel (CWP < 1.16) chains with command injection in protected_directory for root RCE. ⚡ Action: Upgrade CWP to v1.16 immediately. 🔗 https://t.co/ZSp7kEUVAY https://…
  • New exploit repo CVE-2026-98432
    GarphenGate/cve-2026-98432-defender-toolkit: Exposure audits, hunt queries and a validated interim mitigation for CVE-2026-98432, the use-after-free in the Linux IPv4 TCP handshake. Read-only scripts with a self-test. From GarphenGate Security Research.
  • Tibo CVE-2026-98432
    Go 1.24 silently enabling MPTCP listeners by default just handed Claude a silver platter. CVE-2026-98432 (CVSS 9.8) lets unauth remote peers pop root during the IPv4 TCP handshake. 10 years old. Anthropic’s lab exploit takes 48 min to leak pointers and drop a shell on any host…
  • stemshop.bsky.social CVE-2026-97718
    🚨 CVE-2026-97718 — CVSS 9.4 CRITICAL CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. ... 🔎 https://stemshop.top/cve/CVE-2026-97718 #CVE #CyberSecurity #InfoSec
  • stemshop.bsky.social CVE-2026-116769
    🚨 CVE-2026-116769 — CVSS 9.3 CRITICAL CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13... 🔎 https://stemshop.top/cve/CVE-2026-116769 #CVE #CyberSecurity #InfoSec
  • stemshop.bsky.social CVE-2026-102435
    🚨 CVE-2026-102435 — CVSS 9.8 CRITICAL The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to in... 🔎 https://stemshop.top/cve/CVE-2026-102435 #CVE #CyberSecurity #InfoSec
  • securityrss.ai CVE-2026-97229
    An attacker attempted to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) on Alpine Linux's GitLab server shortly after a fix was released. Although no successful exploit was confirmed, Alpine rebuilt the server and reset passwords as a precaution.
  • amori CVE-2026-97229
    【GitLab、1,000台超が重大な欠陥に未対応】 Shadowserverは11月1日、CVE-2026-97229に脆弱な公開GitLabを1,000台超確認したと公表した。 これは未修正の観測数であり、全台の侵害が確認されたという意味ではない。
  • amori CVE-2026-104935
    【Ivanti VPN、3つの欠陥をつなぐ侵入】 Connect SecureのCVE-2026-104935・111357・118527をつなぎ、認証なしでroot権限を得る攻撃が確認されている。 Volexityは、ウェブシェルを残さずログを消す手口を報告し、Integrity Checkerだけでは侵害を見つけにくいと指摘した。
  • 矢野朋義@AI活用・サービス開発 CVE-2026-98432
    🔐 直近の重要な脆弱性(2026-11-03 07:00 JST時点) 1) CVE-2026-98432 📦 対象製品:Linuxカーネル(IPv4 TCP処理)。Red Hat Enterprise Linuxなど、影響を受けるディストリビューションのカーネル ⚠️ 影響:Red
  • cve.now CVE-2026-86596
    🆕 New CVE remote code execution in IPN email template handling (CVE-2026-86596) An attacker with custom-level access can inject PHP code via the item_name parameter to run any code on the server. No patch listed yet https://t.co/pGAqpzrMM3
VulnerabilityExploitedCVSSCloudflareCFAWSAWSAzureAzureGoogleGoogleFastlyFastlyF5F5AkamaiAkam.CRSCRS
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CVE-2026-118527
2026-10-30—
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CVE-2026-111357
2026-10-307.0
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
CVE-2026-97229
2026-10-2910.0
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
CVE-2026-76418
2026-10-298.6
Linux Kernel Missing Initialization of a Variable Vulnerability
CVE-2026-46300
2026-10-287.8
Broadcom VMWare ESX Insufficient Logging Vulnerability
CVE-2026-41709
2026-10-282.7
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
CVE-2026-48356
2026-10-279.3
Google Brotli Unchecked Return Value Vulnerability
CVE-2026-111497
2026-10-279.2Logs+3dRule+4d
PHP Stale Internal Request-State Vulnerability
CVE-2026-109619
2026-10-269.2BlocksRule+0dRule+0dRule+0d
PHP Memory Corruption Vulnerability
CVE-2026-109618
2026-10-269.2BlocksRule+0dRule+0dRule+0d
Arista VeloCloud Orchestrator SQL Injection Vulnerability
CVE-2026-114625
2026-10-239.4
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVE-2026-110447
2026-10-239.2
Plex Media Server External Control of File Name or Path Vulnerability
CVE-2026-96656
2026-10-208.6
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96655
2026-10-205.3
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
CVE-2026-96654
2026-10-206.9
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-96652
2026-10-205.3
Siemens Software Center Uncontrolled Search Path Element Vulnerability
CVE-2026-110936
2026-10-208.4
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVE-2026-106931
2026-10-208.5
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
CVE-2026-102764
2026-10-169.3
Fortinet Multiple Products Path Traversal Vulnerability
CVE-2025-61624
2026-10-165.4
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-21589
2026-10-159.3Blocks+7dRule+2dRule+16d
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
CVE-2026-76519
2026-10-149.8
Ahsay AhsayCBS Command Injection Vulnerability
CVE-2026-105134
2026-10-1410.0Rule+17d
Ahsay AhsayCBS Improper Authentication Vulnerability
CVE-2026-105133
2026-10-146.9Rule+17d
Palo Alto Networks PAN-OS Code Injection Vulnerability
CVE-2026-0322
2026-10-148.6
Microsoft Windows Command Injection Vulnerability
CVE-2026-96951
2026-10-138.8
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2026-104935
2026-10-138.6Rule+8d
Strapi Cleartext Storage of Sensitive Information Vulnerability
CVE-2023-22894
2026-10-087.2
ONLYOFFICE Docs Server Path Traversal Vulnerability
CVE-2021-3199
2026-10-089.8
Apache Struts Command Injection Vulnerability
CVE-2016-3081
2026-10-088.1
ISC BIND Data Processing Errors Vulnerability
CVE-2015-5477
2026-10-087.5
ProFTPD Improper Access Control Vulnerability
CVE-2015-3306
2026-10-0810.0
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
CVE-2026-88779
2026-10-048.7
Zammad GmbH Zammad Improper Privilege Management Vulnerability
CVE-2026-102490
2026-10-028.5
Zammad GmbH Zammad Session Fixation Vulnerability
CVE-2026-102489
2026-10-028.7Rule+21d
Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-104286
2026-10-019.8
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
CVE-2026-76504
2026-09-309.8Rule+21d
Apple Multiple Products Out-of-Bounds Write Vulnerability
CVE-2026-86950
2026-09-298.8
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
CVE-2026-88772
2026-09-279.5
Citrix NetScaler Improper Input Validation Vulnerability
CVE-2026-88771
2026-09-279.5Blocks+4dRule+24d
WordPress Core Remote File Inclusion Vulnerability
CVE-2026-87902
2026-09-258.1Blocks+3dRule+29d
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
CVE-2026-67279
2026-09-256.9
Microsoft SharePoint Code Injection Vulnerability
CVE-2026-65660
2026-09-258.8Rule+71d
Adobe Commerce and Magento Incorrect Authorization Vulnerability
CVE-2026-71362
2026-09-249.1Rule+36d
WSO2 Multiple Products Path Traversal Vulnerability
CVE-2026-5430
2026-09-2410.0Rule+76d
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
CVE-2026-94127
2026-09-229.3Blocks+14d
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
CVE-2026-93952
2026-09-229.5
Check Point Multiple Products Path Traversal Vulnerability
CVE-2026-93616
2026-09-229.8
Check Point Multiple Products Improper Certificate Validation Vulnerability
CVE-2026-85102
2026-09-229.8
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVE-2026-7273
2026-09-218.8
BlocksLogsOffRuleNo public claimBefore feed historyNo public source+Nd: first rule N days after the CVE was published

From knowing to protected

This site is free. When you want it handled, Vigilbase does the work.

Vigilbase Shield

Get vendor rules like these in front of your site.

Managed Cloudflare WAF and DDoS protection on a monthly plan, run by our team.

See Shield plans
Vigilbase OS

Know the day a CVE reaches your stack, and close it.

Connects the security tools you already pay for. Vigil investigates, makes the fixes you authorise and verifies them.

Get started
Cloudflare Checkup

Already on Cloudflare? See how it is set up.

Free review of your Cloudflare configuration, with a read-only API token.

Run a free checkup