Home / Cyber watch

CYBER WATCH

Cyber watch in real time

Vulnerabilities actively exploited worldwide, updated automatically from the official CISA catalogue.

Actively exploited vulnerabilities — CISA KEV catalogueOfficial source from the US agency CISA: every listed flaw is being exploited by attackers.Updated on October 27, 2026 at 8:03 PM

High

CVE-2026-109619

PHP Stale Internal Request-State Vulnerability

CISA KEV · Added on October 26, 2026

View on the CISA website ↗

High

CVE-2026-109618

PHP Memory Corruption Vulnerability

CISA KEV · Added on October 26, 2026

View on the CISA website ↗

High

CVE-2026-114625

Arista VeloCloud Orchestrator SQL Injection Vulnerability

CISA KEV · Added on October 23, 2026

View on the CISA website ↗

High

CVE-2026-110447

Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

CISA KEV · Added on October 23, 2026

View on the CISA website ↗

High

CVE-2026-110936

Siemens Software Center Uncontrolled Search Path Element Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-106931

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-96656

Plex Media Server External Control of File Name or Path Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-96655

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-96654

Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-96652

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CISA KEV · Added on October 20, 2026

View on the CISA website ↗

High

CVE-2026-102764

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

CISA KEV · Added on October 16, 2026

View on the CISA website ↗

High

CVE-2025-61624

Fortinet Multiple Products Path Traversal Vulnerability

CISA KEV · Added on October 16, 2026

View on the CISA website ↗

High

CVE-2026-21589

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

CISA KEV · Added on October 15, 2026

View on the CISA website ↗

High

CVE-2026-105134

Ahsay AhsayCBS Command Injection Vulnerability

CISA KEV · Added on October 14, 2026

View on the CISA website ↗

High

CVE-2026-105133

Ahsay AhsayCBS Improper Authentication Vulnerability

CISA KEV · Added on October 14, 2026

View on the CISA website ↗

High

CVE-2026-76519

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

CISA KEV · Added on October 14, 2026

View on the CISA website ↗

High

CVE-2026-0322

Palo Alto Networks PAN-OS Code Injection Vulnerability

CISA KEV · Added on October 14, 2026

View on the CISA website ↗

High

CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

CISA KEV · Added on October 13, 2026

View on the CISA website ↗

High

CVE-2026-96951

Microsoft Windows Command Injection Vulnerability

CISA KEV · Added on October 13, 2026

View on the CISA website ↗

High

CVE-2023-22894

Strapi Cleartext Storage of Sensitive Information Vulnerability

CISA KEV · Added on October 8, 2026

View on the CISA website ↗

High

CVE-2021-3199

ONLYOFFICE Docs Server Path Traversal Vulnerability

CISA KEV · Added on October 8, 2026

View on the CISA website ↗

High

CVE-2016-3081

Apache Struts Command Injection Vulnerability

CISA KEV · Added on October 8, 2026

View on the CISA website ↗

High

CVE-2015-5477

ISC BIND Data Processing Errors Vulnerability

CISA KEV · Added on October 8, 2026

View on the CISA website ↗

High

CVE-2015-3306

ProFTPD Improper Access Control Vulnerability

CISA KEV · Added on October 8, 2026

View on the CISA website ↗