{"window_hours":24,"items":[{"cveId":"CVE-2026-98432","name":"ipv4: free inet_opt and ireq_opt after an RCU grace period","people":83,"posts":90,"engagement":9,"pocs":19,"sources":["bluesky","x","github","hn"],"previousPeople":7,"score":337.6,"exploited":false,"cvss":9.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-111497","name":"Google Brotli Unchecked Return Value Vulnerability","people":7,"posts":7,"engagement":4,"pocs":3,"sources":["bluesky","x","hn","github"],"previousPeople":0,"score":44.2,"exploited":true,"cvss":9.2,"coverage":{"cloudflare":{"status":"log","firstOn":"2026-10-25","daysToRule":3},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-26","daysToRule":4},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-97229","name":"GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability","people":11,"posts":12,"engagement":0,"pocs":0,"sources":["bluesky","x"],"previousPeople":0,"score":37,"exploited":true,"cvss":10,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-109618","name":"PHP Memory Corruption Vulnerability","people":8,"posts":9,"engagement":1,"pocs":0,"sources":["x","bluesky"],"previousPeople":1,"score":29.4,"exploited":true,"cvss":9.2,"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-22","daysToRule":null},"aws":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-109619","name":"PHP Stale Internal Request-State Vulnerability","people":6,"posts":6,"engagement":0,"pocs":1,"sources":["x","bluesky","github"],"previousPeople":0,"score":28,"exploited":true,"cvss":9.2,"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-10-22","daysToRule":null},"aws":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"f5":{"status":"rule","firstOn":"2026-10-21","daysToRule":0},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-97718","name":"CSRF in Secure Access Server v14.60","people":5,"posts":5,"engagement":0,"pocs":0,"sources":["bluesky","mastodon","x"],"previousPeople":0,"score":21,"exploited":false,"cvss":9.4,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2025-41450","name":"Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2","people":3,"posts":4,"engagement":0,"pocs":1,"sources":["x","github"],"previousPeople":0,"score":17,"exploited":false,"cvss":8.2,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-86596","name":"s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter","people":3,"posts":3,"engagement":0,"pocs":1,"sources":["github","x"],"previousPeople":0,"score":17,"exploited":false,"cvss":9.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-102435","name":"Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field","people":2,"posts":2,"engagement":24,"pocs":0,"sources":["bluesky","x"],"previousPeople":0,"score":16.4,"exploited":false,"cvss":9.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-105606","name":"Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8","people":4,"posts":4,"engagement":0,"pocs":0,"sources":["bluesky","x"],"previousPeople":0,"score":16,"exploited":false,"cvss":9.5,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-93680","name":"Langflow OSS is affected by multiple vulnerabilities","people":3,"posts":3,"engagement":2,"pocs":0,"sources":["x","bluesky"],"previousPeople":0,"score":15.2,"exploited":false,"cvss":9.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-63445","name":"Perses: Unvalidated project parameter enables filesystem path traversal","people":3,"posts":3,"engagement":0,"pocs":0,"sources":["mastodon","bluesky","x"],"previousPeople":0,"score":15,"exploited":false,"cvss":7.1,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-81181","name":"SysReptor: Session Fixation in Password-Protected Shared Notes","people":3,"posts":3,"engagement":0,"pocs":0,"sources":["bluesky","mastodon","x"],"previousPeople":0,"score":15,"exploited":false,"cvss":3.7,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-111357","name":"Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability","people":3,"posts":4,"engagement":1,"pocs":0,"sources":["x","bluesky"],"previousPeople":0,"score":14.4,"exploited":true,"cvss":7,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-118527","name":"Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","people":3,"posts":4,"engagement":1,"pocs":0,"sources":["x","bluesky"],"previousPeople":0,"score":14.4,"exploited":true,"cvss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-8857","name":"Full RCE using EasyTimeline Extension","people":3,"posts":3,"engagement":1,"pocs":0,"sources":["bluesky","x"],"previousPeople":0,"score":14.4,"exploited":false,"cvss":0,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-92122","name":"Jenkins Project Jenkins Script Security Plugin","people":3,"posts":3,"engagement":1,"pocs":0,"sources":["bluesky","x"],"previousPeople":0,"score":14.4,"exploited":false,"cvss":8.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-110447","name":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","people":2,"posts":2,"engagement":0,"pocs":1,"sources":["x","github"],"previousPeople":0,"score":14,"exploited":true,"cvss":9.2,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-112688","name":"Apple iOS and iPadOS","people":1,"posts":1,"engagement":8,"pocs":1,"sources":["github"],"previousPeople":0,"score":13.4,"exploited":false,"cvss":8.8,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}},{"cveId":"CVE-2026-116769","name":"Authentication bypass in Secure Access Servers","people":3,"posts":3,"engagement":0,"pocs":0,"sources":["bluesky","mastodon"],"previousPeople":0,"score":13,"exploited":false,"cvss":9.3,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}}}]}