{"basis":"claimed","total":1766,"offset":0,"items":[{"id":"CVE-2026-118527","name":"Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","vendorProject":"Ivanti","product":"Connect Secure","publishedAt":null,"cvss":null,"exploited":{"kevAdded":"2026-10-30","dueDate":"2026-11-13","ransomware":false},"epss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-111357","name":"Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability","vendorProject":"Ivanti","product":"Connect Secure","publishedAt":"2026-10-15","cvss":{"score":7,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-30","dueDate":"2026-11-02","ransomware":false},"epss":{"score":0.00533,"percentile":0.45014,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-97229","name":"GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability","vendorProject":"GitLab","product":"Community Edition and Enterprise Edition","publishedAt":"2026-10-13","cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-29","dueDate":"2026-11-01","ransomware":false},"epss":{"score":0.273,"percentile":0.9806,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-76418","name":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability","vendorProject":"Cisco","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","publishedAt":"2026-10-28","cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-29","dueDate":"2026-11-01","ransomware":false},"epss":{"score":0.00821,"percentile":0.57299,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-46300","name":"Linux Kernel Missing Initialization of a Variable Vulnerability","vendorProject":"Linux","product":"Kernel","publishedAt":"2026-05-23","cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-28","dueDate":"2026-10-31","ransomware":false},"epss":{"score":0.1613,"percentile":0.96928,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-41709","name":"Broadcom VMWare ESX Insufficient Logging Vulnerability","vendorProject":"Broadcom","product":"VMware ESX","publishedAt":"2026-07-30","cvss":{"score":2.7,"severity":"LOW","version":"3.1"},"exploited":{"kevAdded":"2026-10-28","dueDate":"2026-11-11","ransomware":false},"epss":{"score":0.00689,"percentile":0.52738,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-48356","name":"Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","vendorProject":"Adobe","product":"Commerce and Magento","publishedAt":"2026-07-14","cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-27","dueDate":"2026-11-10","ransomware":false},"epss":{"score":0.44579,"percentile":0.98769,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-111497","name":"Google Brotli Unchecked Return Value Vulnerability","vendorProject":"Google","product":"Brotli","publishedAt":"2026-10-22","cvss":{"score":9.2,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-27","dueDate":"2026-11-10","ransomware":false},"epss":{"score":0.82641,"percentile":0.99667,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"log","firstOn":"2026-10-25","daysToRule":3},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-26","daysToRule":4},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-109619","name":"PHP Stale Internal Request-State Vulnerability","vendorProject":"PHP Group","product":"PHP","publishedAt":"2026-10-21","cvss":{"score":9.2,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-26","dueDate":"2026-10-29","ransomware":false},"epss":{"score":0.99999,"percentile":0.99999,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-22","daysToRule":null},"aws":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-109618","name":"PHP Memory Corruption Vulnerability","vendorProject":"PHP Group","product":"PHP","publishedAt":"2026-10-21","cvss":{"score":9.2,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-26","dueDate":"2026-10-29","ransomware":false},"epss":{"score":0.99999,"percentile":0.99998,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-22","daysToRule":null},"aws":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-114625","name":"Arista VeloCloud Orchestrator SQL Injection Vulnerability","vendorProject":"Arista","product":"VeloCloud Orchestrator","publishedAt":"2026-10-22","cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-23","dueDate":"2026-10-26","ransomware":false},"epss":{"score":0.01025,"percentile":0.63573,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-110447","name":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","vendorProject":"Collabora","product":"Collabora Online – Built-in CODE Server","publishedAt":"2026-10-14","cvss":{"score":9.2,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-23","dueDate":"2026-10-26","ransomware":false},"epss":{"score":0.73307,"percentile":0.99461,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-96656","name":"Plex Media Server External Control of File Name or Path Vulnerability","vendorProject":"Plex","product":"Media Server","publishedAt":"2026-09-23","cvss":{"score":8.6,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-10-23","ransomware":false},"epss":{"score":0.01785,"percentile":0.78303,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-96655","name":"Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","vendorProject":"Plex","product":"Media Server","publishedAt":"2026-09-23","cvss":{"score":5.3,"severity":"MEDIUM","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-11-03","ransomware":false},"epss":{"score":0.01637,"percentile":0.76337,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-96654","name":"Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability","vendorProject":"Plex","product":"Media Server","publishedAt":"2026-09-23","cvss":{"score":6.9,"severity":"MEDIUM","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-10-23","ransomware":false},"epss":{"score":0.01949,"percentile":0.80218,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-96652","name":"Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","vendorProject":"Plex","product":"Media Server","publishedAt":"2026-09-23","cvss":{"score":5.3,"severity":"MEDIUM","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-11-03","ransomware":false},"epss":{"score":0.01821,"percentile":0.78759,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-110936","name":"Siemens Software Center Uncontrolled Search Path Element Vulnerability","vendorProject":"Siemens","product":"Software Center","publishedAt":"2026-10-15","cvss":{"score":8.4,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-11-03","ransomware":false},"epss":{"score":0.00967,"percentile":0.61749,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-106931","name":"EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability","vendorProject":"EG Secure Solutions","product":"SiteGuard Server Edition","publishedAt":"2026-10-14","cvss":{"score":8.5,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-20","dueDate":"2026-10-23","ransomware":false},"epss":{"score":0.02528,"percentile":0.84897,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-102764","name":"BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","vendorProject":"BeyondTrust","product":"Remote Support","publishedAt":"2026-10-15","cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-16","dueDate":"2026-10-19","ransomware":false},"epss":{"score":0.1895,"percentile":0.97299,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2025-61624","name":"Fortinet Multiple Products Path Traversal Vulnerability","vendorProject":"Fortinet","product":"Multiple Products","publishedAt":"2026-04-14","cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"exploited":{"kevAdded":"2026-10-16","dueDate":"2026-10-19","ransomware":false},"epss":{"score":0.01343,"percentile":0.71359,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-21589","name":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","vendorProject":"Atlassian","product":"Multiple Products","publishedAt":"2026-10-05","cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-15","dueDate":"2026-10-18","ransomware":false},"epss":{"score":0.99477,"percentile":0.99943,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-12","daysToRule":7},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-07","daysToRule":2},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":16},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-76519","name":"Cisco Secure Email Gateway Relative Path Traversal Vulnerability","vendorProject":"Cisco","product":"Secure Email Gateway","publishedAt":"2026-10-14","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-14","dueDate":"2026-10-17","ransomware":false},"epss":{"score":0.02152,"percentile":0.82149,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-105134","name":"Ahsay AhsayCBS Command Injection Vulnerability","vendorProject":"Ahsay","product":"AhsayCBS","publishedAt":"2026-10-04","cvss":{"score":10,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-10-14","dueDate":"2026-10-17","ransomware":false},"epss":{"score":0.81763,"percentile":0.99645,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":17},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-105133","name":"Ahsay AhsayCBS Improper Authentication Vulnerability","vendorProject":"Ahsay","product":"AhsayCBS","publishedAt":"2026-10-04","cvss":{"score":6.9,"severity":"MEDIUM","version":"4.0"},"exploited":{"kevAdded":"2026-10-14","dueDate":"2026-10-17","ransomware":false},"epss":{"score":0.7947,"percentile":0.99603,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":17},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-0322","name":"Palo Alto Networks PAN-OS Code Injection Vulnerability","vendorProject":"Palo Alto Networks","product":"PAN-OS","publishedAt":"2026-10-14","cvss":{"score":8.6,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-14","dueDate":"2026-10-17","ransomware":false},"epss":{"score":0.0174,"percentile":0.77728,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-96951","name":"Microsoft Windows Command Injection Vulnerability","vendorProject":"Microsoft","product":"Windows","publishedAt":"2026-10-13","cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-13","dueDate":"2026-10-16","ransomware":false},"epss":{"score":0.09813,"percentile":0.95551,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-104935","name":"Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","vendorProject":"Ivanti","product":"Connect Secure","publishedAt":"2026-10-13","cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-13","dueDate":"2026-10-16","ransomware":false},"epss":{"score":0.86766,"percentile":0.99742,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":8},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2023-22894","name":"Strapi Cleartext Storage of Sensitive Information Vulnerability","vendorProject":"Strapi","product":"Strapi","publishedAt":"2023-04-19","cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-08","dueDate":"2026-10-11","ransomware":false},"epss":{"score":0.04114,"percentile":0.9078,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2021-3199","name":"ONLYOFFICE Docs Server Path Traversal Vulnerability","vendorProject":"ONLYOFFICE","product":"Docs","publishedAt":"2021-01-22","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-08","dueDate":"2026-10-11","ransomware":false},"epss":{"score":0.30244,"percentile":0.98222,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"no_history","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"no_history","firstOn":null,"daysToRule":null}}},{"id":"CVE-2016-3081","name":"Apache Struts Command Injection Vulnerability","vendorProject":"Apache","product":"Struts","publishedAt":"2016-04-26","cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-08","dueDate":"2026-10-11","ransomware":false},"epss":{"score":0.96525,"percentile":0.99882,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"no_history","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"no_history","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"no_history","firstOn":null,"daysToRule":null}}},{"id":"CVE-2015-5477","name":" ISC BIND Data Processing Errors Vulnerability","vendorProject":"ISC","product":"BIND","publishedAt":"2015-07-29","cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-10-08","dueDate":"2026-10-11","ransomware":false},"epss":{"score":0.99584,"percentile":0.99947,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"no_history","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"no_history","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"no_history","firstOn":null,"daysToRule":null}}},{"id":"CVE-2015-3306","name":"ProFTPD Improper Access Control Vulnerability","vendorProject":"ProFTPD","product":"ProFTPD","publishedAt":"2015-05-18","cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-08","dueDate":"2026-10-11","ransomware":false},"epss":{"score":0.99497,"percentile":0.99945,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"no_history","firstOn":null,"daysToRule":null},"aws":{"status":"no_history","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"no_history","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"no_history","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"no_history","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-88779","name":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","vendorProject":"Citrix","product":"NetScaler","publishedAt":"2026-10-04","cvss":{"score":8.7,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-04","dueDate":"2026-10-07","ransomware":false},"epss":{"score":0.11388,"percentile":0.95995,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-102490","name":"Zammad GmbH Zammad Improper Privilege Management Vulnerability","vendorProject":"Zammad GmbH","product":"Zammad","publishedAt":"2026-09-30","cvss":{"score":8.5,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-02","dueDate":"2026-10-05","ransomware":false},"epss":{"score":0.10936,"percentile":0.95885,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-102489","name":"Zammad GmbH Zammad Session Fixation Vulnerability","vendorProject":"Zammad GmbH","product":"Zammad","publishedAt":"2026-09-30","cvss":{"score":8.7,"severity":"HIGH","version":"4.0"},"exploited":{"kevAdded":"2026-10-02","dueDate":"2026-10-05","ransomware":false},"epss":{"score":0.22478,"percentile":0.97706,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":21},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-104286","name":"Fortinet FortiMail Path Traversal Vulnerability","vendorProject":"Fortinet","product":"FortiMail","publishedAt":"2026-10-01","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-10-01","dueDate":"2026-10-04","ransomware":false},"epss":{"score":0.04573,"percentile":0.9162,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-76504","name":"Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","publishedAt":"2026-09-30","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-09-30","dueDate":"2026-10-03","ransomware":false},"epss":{"score":0.38928,"percentile":0.98589,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":21},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-86950","name":"Apple Multiple Products Out-of-Bounds Write Vulnerability","vendorProject":"Apple","product":"Multiple Products","publishedAt":"2026-09-28","cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-09-29","dueDate":"2026-10-13","ransomware":false},"epss":{"score":0.26166,"percentile":0.97995,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-88772","name":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","vendorProject":"Citrix","product":"NetScaler","publishedAt":"2026-09-27","cvss":{"score":9.5,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-09-27","dueDate":"2026-09-30","ransomware":false},"epss":{"score":0.78162,"percentile":0.99578,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-88771","name":"Citrix NetScaler Improper Input Validation Vulnerability","vendorProject":"Citrix","product":"NetScaler","publishedAt":"2026-09-27","cvss":{"score":9.5,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-09-27","dueDate":"2026-09-30","ransomware":false},"epss":{"score":0.8216,"percentile":0.99655,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-01","daysToRule":4},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":24},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-87902","name":"WordPress Core Remote File Inclusion Vulnerability","vendorProject":"WordPress","product":"Core","publishedAt":"2026-09-22","cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-09-25","dueDate":"2026-09-28","ransomware":false},"epss":{"score":0.95769,"percentile":0.99872,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-09-25","daysToRule":3},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":29},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-67279","name":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","vendorProject":"MikroTik","product":"RouterOS","publishedAt":"2026-09-05","cvss":{"score":6.9,"severity":"MEDIUM","version":"4.0"},"exploited":{"kevAdded":"2026-09-25","dueDate":"2026-09-28","ransomware":false},"epss":{"score":0.02277,"percentile":0.83113,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-65660","name":"Microsoft SharePoint Code Injection Vulnerability","vendorProject":"Microsoft","product":"SharePoint","publishedAt":"2026-08-11","cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-09-25","dueDate":"2026-09-28","ransomware":false},"epss":{"score":0.08189,"percentile":0.9487,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":71},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-71362","name":"Adobe Commerce and Magento Incorrect Authorization Vulnerability ","vendorProject":"Adobe","product":"Commerce and Magento ","publishedAt":"2026-08-11","cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-09-24","dueDate":"2026-09-27","ransomware":false},"epss":{"score":0.90491,"percentile":0.99801,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-09-16","daysToRule":36},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-5430","name":"WSO2 Multiple Products Path Traversal Vulnerability ","vendorProject":"WSO2","product":"Multiple Products","publishedAt":"2026-08-06","cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-09-24","dueDate":"2026-09-27","ransomware":false},"epss":{"score":0.2239,"percentile":0.97695,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":76},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-94127","name":"F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","vendorProject":"F5","product":"BIG-IP APM","publishedAt":"2026-09-22","cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-09-22","dueDate":"2026-09-25","ransomware":false},"epss":{"score":0.2655,"percentile":0.98016,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-06","daysToRule":14},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-93952","name":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","vendorProject":"Arista","product":"VeloCloud Orchestrator","publishedAt":"2026-09-22","cvss":{"score":9.5,"severity":"CRITICAL","version":"4.0"},"exploited":{"kevAdded":"2026-09-22","dueDate":"2026-09-25","ransomware":false},"epss":{"score":0.01384,"percentile":0.72201,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-93616","name":"Check Point Multiple Products Path Traversal Vulnerability","vendorProject":"Check Point","product":"Multiple Products","publishedAt":"2026-09-22","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-09-22","dueDate":"2026-09-25","ransomware":false},"epss":{"score":0.91605,"percentile":0.99813,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-85102","name":"Check Point Multiple Products Improper Certificate Validation Vulnerability","vendorProject":"Check Point","product":"Multiple Products","publishedAt":"2026-09-09","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2026-09-22","dueDate":"2026-09-25","ransomware":false},"epss":{"score":0.5414,"percentile":0.99008,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"id":"CVE-2026-7273","name":"Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability","vendorProject":"Zyxel","product":"GS1900 Series Switches","publishedAt":"2026-06-16","cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"exploited":{"kevAdded":"2026-09-21","dueDate":"2026-09-24","ransomware":false},"epss":{"score":0.02778,"percentile":0.86369,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}}]}