LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week
All Known exploited Critical High This week
Vendors Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
14 CVEs EPSSCoverage
9.2CVSS 4.0 CVE-2026-109618 Exploited RCE via OOM corruption PHP Group · PHP EPSS >99.9% 4 stories 10 hours ago 9.2CVSS 4.0 CVE-2026-109619 Exploited RCE via stale global state PHP Group · PHP EPSS >99.9% 4 stories 10 hours ago 7.8CVSS 3.1 CVE-2026-123039 Exploited Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket Check Point · Multiple Products EPSS 1.3% 2 stories 10 hours ago 9.8CVSS 3.1 CVE-2026-85102 Exploited Improper Certificate Validation in Quantum Security Gateway Check Point · Multiple Products EPSS 54% 3 stories 21 hours ago 9.8CVSS 3.1 CVE-2026-93616 Exploited Directory Traversal and File upload allows execution of arbitrary script on the Management Server Check Point · Multiple Products EPSS 92% 1 story 21 hours ago 8.1CVSS 3.1 CVE-2026-119618 Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers Apache · HTTP Server EPSS 0.41% 1 story 2 days ago 7.0CVSS 3.1 CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability Microsoft · Paint EPSS 0.38% 1 story 5 days ago 9.8CVSS 3.1 CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period Linux EPSS 0.78% 4 stories 5 days ago 7.2CVSS 3.1 CVE-2026-96656 Exploited Plex Media Server arbitrary file write Plex · Media Server EPSS 1.8% 2 stories 5 days ago 6.5CVSS 3.1 CVE-2026-96654 Exploited Plex Media Server URL injection Plex · Media Server EPSS 1.9% 2 stories 5 days ago 4.3CVSS 3.1 CVE-2026-96652 Exploited Plex Media Server SSRF Plex · Media Server EPSS 12% 2 stories 5 days ago 4.3CVSS 3.1 CVE-2026-96655 Exploited Plex Media Server arbitrary-host SSRF Plex · Media Server EPSS 11% 2 stories 5 days ago 10.0CVSS 3.1 CVE-2026-102255 SonicWall SMA1000 vulnerability SonicWall · SMA1000 EPSS 0.98% 2 stories 6 days ago 7.5CVSS 3.1 CVE-2026-19868 Exploited SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall · SonicOS SSLVPN EPSS 0.53% 1 story 6 days ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed