LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week
All Known exploited Critical High This week
Vendors Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
127 CVEs EPSSCoverage
9.2CVSS 4.0 CVE-2026-109618 Exploited RCE via OOM corruption PHP Group · PHP EPSS >99.9% 4 stories 6 hours ago 9.2CVSS 4.0 CVE-2026-109619 Exploited RCE via stale global state PHP Group · PHP EPSS >99.9% 4 stories 6 hours ago 7.8CVSS 3.1 CVE-2026-123039 Exploited Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket Check Point · Multiple Products EPSS 1.3% 2 stories 6 hours ago 9.8CVSS 3.1 CVE-2026-85102 Exploited Improper Certificate Validation in Quantum Security Gateway Check Point · Multiple Products EPSS 54% 3 stories 18 hours ago 9.8CVSS 3.1 CVE-2026-93616 Exploited Directory Traversal and File upload allows execution of arbitrary script on the Management Server Check Point · Multiple Products EPSS 92% 1 story 18 hours ago 7.2CVSS 3.1 CVE-2026-96656 Exploited Plex Media Server arbitrary file write Plex · Media Server EPSS 1.8% 2 stories 5 days ago 6.5CVSS 3.1 CVE-2026-96654 Exploited Plex Media Server URL injection Plex · Media Server EPSS 1.9% 2 stories 5 days ago 4.3CVSS 3.1 CVE-2026-96652 Exploited Plex Media Server SSRF Plex · Media Server EPSS 12% 2 stories 5 days ago 4.3CVSS 3.1 CVE-2026-96655 Exploited Plex Media Server arbitrary-host SSRF Plex · Media Server EPSS 11% 2 stories 5 days ago 7.5CVSS 3.1 CVE-2026-19868 Exploited SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall · SonicOS SSLVPN EPSS 0.53% 1 story 6 days ago 9.4CVSS 3.1 CVE-2023-2868 Exploited Remote Code injection in Barracuda Email Security Gateway Barracuda Networks · Email Security Gateway (ESG) Appliance EPSS 87% 1 story 1 week ago 9.3CVSS 4.0 CVE-2026-116606 Exploited Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway Barracuda Networks · Barracuda Email Security Gateway (ESG) EPSS 11% 1 story 1 week ago 8.6CVSS 4.0 CVE-2026-111560 Exploited OS Command Injection in Barracuda Appliances Barracuda Networks · Multiple Products EPSS 9.1% 1 story 1 week ago 8.6CVSS 3.1 CVE-2026-76418 Exploited Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software EPSS 0.82% 2 stories 2 weeks ago 9.8CVSS 3.1 CVE-2026-9082 Exploited Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 Drupal · Core EPSS 89% 1 story 2 weeks ago 10.0CVSS 3.1 CVE-2026-97229 Exploited Integer Overflow or Wraparound in GitLab GitLab · Community Edition and Enterprise Edition EPSS 69% 1 story 2 weeks ago 10.0CVSS 3.1 CVE-2026-16812 Exploited VeloCloud Orchestrator OS Command Injection Arista · VeloCloud Orchestrator EPSS 1.8% 2 stories 2 weeks ago 10.0CVSS 3.1 CVE-2026-20127 Exploited Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager EPSS 88% 1 story 2 weeks ago 9.4CVSS 4.0 CVE-2025-8875 Exploited Insecure Deserialization Vulnerability N-able · N-Central EPSS 2.3% 1 story 2 weeks ago 9.4CVSS 4.0 CVE-2025-8876 Exploited Command Injection Vulnerability N-able · N-Central EPSS 4.1% 1 story 2 weeks ago 6.6CVSS 3.0 CVE-2024-39717 Exploited Versa Director Dangerous File Type Upload Vulnerability Versa · Director EPSS 4.0% 1 story 2 weeks ago 8.6CVSS 3.1 CVE-2026-20349 Exploited Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) EPSS 1.0% 2 stories 2 weeks ago 9.2CVSS 4.0 CVE-2026-110447 Exploited Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora · Online – Built-in CODE Server EPSS 73% 1 story 4 weeks ago 10.0CVSS 3.1 CVE-2026-105134 Exploited Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection Ahsay · AhsayCBS EPSS 82% 1 story 4 weeks ago 9.8CVSS 3.1 CVE-2026-76519 Exploited Cisco Secure Email Gateway Arbitrary File Write Vulnerability Cisco · Secure Email Gateway EPSS 6.2% 2 stories 4 weeks ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed