Critical Alert 1 Active Exploit Detected Today

CVE-2026-86950 — Apple Multiple Products Out-of-Bounds Write Vulnerability →

Powered by CVE Watchtower

×

CVE-2026-18963

Critical HCL BigFix Vulnerabilities Expose Admin Accounts Diagram of critical HCL BigFix vulnerabilities and database exploitation paths

Diagram of critical HCL BigFix vulnerabilities and database exploitation paths

Critical HCL BigFix Vulnerabilities Expose Admin Accounts

Do Son September 18, 2026

HCL Technologies released security updates, addressing five severe HCL BigFix vulnerabilities. These critical software defects allow unauthenticated...

Critical Siemens Vulnerabilities Hit Industrial Edge and OIS Siemens vulnerabilities advisory dashboard showing CVE-2026-18963 authentication bypass and CVE-2026-50093 file upload flaws

Siemens vulnerabilities advisory dashboard showing CVE-2026-18963 authentication bypass and CVE-2026-50093 file upload flaws

Critical Siemens Vulnerabilities Hit Industrial Edge and OIS

Do Son September 9, 2026

Siemens ProductCERT disclosed two critical Siemens vulnerabilities on September 8, 2026. One allows full account takeover in...

CVE-2026-66780 (CVSS 9.9): MITM Flaw Hits Red Hat ACM Red Hat vulnerability CVE-2026-66780 CVSS 9.9 man-in-the-middle attack across a Kubernetes cluster mesh diagram

Red Hat vulnerability CVE-2026-66780 CVSS 9.9 man-in-the-middle attack across a Kubernetes cluster mesh diagram

CVE-2026-66780 (CVSS 9.9): MITM Flaw Hits Red Hat ACM

Do Son August 20, 2026

TL;DR Red Hat disclosed three critical flaws across its cloud and identity products. The most severe, CVE-2026-66780,...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intel📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026

CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intel📅 Updated: Sep 30, 2026
CVE-2026-95329CVSS 9.6
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote...
📅 Updated: Sep 30, 2026
CVE-2026-103395CVSS 9.3
LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in...
📅 Updated: Sep 30, 2026
CVE-2026-76570CVSS 10.0
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The...
📅 Updated: Sep 30, 2026
CVE-2026-101110CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function...
📅 Updated: Sep 30, 2026
CVE-2026-100752CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds...
📅 Updated: Sep 30, 2026
CVE-2026-102508CVSS 9.2
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X (PLC4J)...
📅 Updated: Sep 30, 2026
CVE-2026-101108CVSS 9.3
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the...
📅 Updated: Sep 30, 2026