CVE-2018-10735

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...

CVE-2017-17731

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461 , carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of...

Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

Astra Linux – Vulnerability in Firefox and Thunderbird

An attacker was able to execute code in the content process by exploiting a use-after-free in Animation timelines. There have been reports of this vulnerability being exploited in real-world scenarios. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1,...

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition CE and Enterprise Edition EE. The release addresses CVE-2026-85706, a critical path traversal vulnerability CWE-22 in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLa...

Exploit for Static Code Injection in N-Able N-Central

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection...

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

Update Chrome now to protect against an actively exploited vulnerability

Chrome is rolling out an update for its desktop browser. The update includes 230 security fixes, one of which is known to be actively exploited. The stable channel has been updated to 153.0.8010.36/.37 for Windows and Mac, and 153.0.8010.36 for Linux. How to update Chrome If you don’t want to wai...

GHSA-6V53-HR58-556R

creationtimestamp| type| source ---|---|--- 2026-09-10 08:18:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87df996f-d392-4a84-a8ce-59565a65625f 2026-10-14 19:50:55+00:00| seen| https://infosec.exchange/users/cve/statuses/117441000550518808...

GCVE-1-2026-20026

creationtimestamp| type| source ---|---|--- 2026-09-09 10:39:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5391d078-3b34-4be8-ba3f-f7f829fa073c...

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...

Vulnerability handling in Google Chrome

Google has discovered a vulnerability in the V8 JavaScript engine of Google Chrome. Google reports that this vulnerability is actively exploited with the identifier CVE-2026-87491. It involves an out-of-bounds write operation in the V8 engine of Google Chrome, which occurs in versions prior to...

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google on Tuesday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 CVSS score: N/A, has been described as an out-of-bounds bug in V8, Chrome's...

Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...

CVE-2026-81963

creationtimestamp| type| source ---|---|--- 2026-09-08 17:25:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117236585017342705 2026-09-08 18:09:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzmkt3whi2t 2026-09-08 18:19:20+00:00| seen|...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

VulnCheck KEV: CVE-2026-87491

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...