Actively Exploited
Cisco ASA and FTD flaw CVE-2026-76418 is exploited
CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. It can crash firewalls through the VPN service. See who is affected and what we do not cover.
Actively Exploited
Vulnerabilities with evidence of real attacks, mostly from the CISA KEV catalog: what is affected, which versions fix it and how quickly to patch.
Actively Exploited
VMware ESX logging flaw CVE-2026-41709 is now exploited
CISA lists VMware ESX flaw CVE-2026-41709 as exploited. It is low severity but hides admin actions. See what to check and what we do not cover.
Actively Exploited
Linux kernel flaw CVE-2026-46300 joins CISA's exploited list
CISA lists Linux kernel flaw CVE-2026-46300 as exploited and chainable with PHP bugs. See fixed kernels and how to check your servers.
Actively Exploited
ProFTPD CVE-2015-3306: exploited mod_copy flaw, how to mitigate
CVE-2015-3306 is an exploited, critical ProFTPD mod_copy flaw. See who is affected, how to check a server by hand and how to mitigate it.
Actively Exploited
CISA adds Adobe Commerce and Magento flaw CVE-2026-48356 to exploited list
CISA lists the Adobe Commerce and Magento upload flaw CVE-2026-48356 as exploited. See how to check your stores and where the fix comes from.
Actively Exploited
CISA adds two PHP remote code execution flaws to its KEV list
Two PHP flaws, CVE-2026-109618 and CVE-2026-109619, are now in CISA's exploited catalogue. See the fixed PHP versions and how to check.
Actively Exploited
Brotli CVE-2026-111497: exploited decoder flaw, how to fix it
CVE-2026-111497 is an exploited, critical Brotli decoder overflow. See which versions are affected, how to check a server and how to update.