CISA KEV
CISA added a Check Point Gaia OS root escalation to KEV on November 13, 2026, due November 16. Check Point saw it used against a couple of dozen customers. Reports describe it as step two after a webshell lands. This post lists the fixed Jumbo Hotfix takes and what to check.
CISA KEV
Microsoft fixed an exploited Outlook flaw on November 10, 2026. Opening a crafted message file can make Outlook skip its external-content warning and leak an NTLMv2 hash. CISA added it to KEV the same day, due November 24. This post lists fixed builds and what to check.
CISA KEV
CISA added six actively exploited flaws to KEV on November 10, 2026. Two Barracuda flaws are due November 13 and four more are due November 24: Chrome, Outlook, Cisco BroadWorks and Openwave. Every fix was public by listing day, from 83 days earlier to the same day.
CISA KEV
CISA added four actively exploited flaws to KEV on November 9, 2026, all due November 12. Each has a vendor fix. This post covers IBM Aspera Faspex, FreeSWITCH, OpenSSH (SSHole) and GPUStack, what each one needs, and what to check after patching.
Weekly Digest
Three exploited CVEs entered CISA KEV last week: WordPress Core, Apple WebKit and SonicWall SonicOS. Each had a vendor fix before the listing, from six days to 905 days earlier. Here is the week in one place, with deadlines and what to patch first.
SonicWall
CISA put a SonicOS SSLVPN flaw on KEV the day its CVE was published. A valid credential for an alternate login method can bypass SAML and MFA. Here is who is affected, the fixed builds, and what to do.
Microsoft
A Windows Paint out-of-bounds read can lead to code execution over a network. It scores 8.1 and is not known to be exploited, but the reported fixed build differs by source. Here is who is affected and how to update.
CISA KEV
CISA put an Apple WebKit flaw patched in May 2024 on KEV. It scores 5.5, yet Sekoia ties it to an exploit chain that ends in cookie theft. Here is who is affected, the fixed versions, and what to do.
CISA KEV
A WordPress Core race condition that runs code during a core update is now on CISA KEV. Attackers are polling the staging path and waiting for sites to update. Here is who is affected, the fixed versions, and what to do.
Weekly Digest
Nine CVEs from eight vendors joined CISA KEV last week, from a 2.7 VMware logging flaw to a CVSS 10.0 GitLab bug. Same SSVC tags got three-day and 14-day deadlines, so here is what to patch first and why.
Ivanti
A 7.0 rated Ivanti Connect Secure flaw is now on CISA KEV. It was the last step of a three-exploit chain that reached root on a fully patched appliance. Here are the fixed builds and why a clean integrity check is not enough.
Cisco
CISA added a Cisco firewall VPN flaw and a CVSS 10.0 GitLab RCE to KEV on the same day, both due November 1. Here are the affected versions, the fixes, and why checking the version alone can leave you exposed.