Set of Sun 25 Oct 2026
Set of Sun 25 Oct 2026
01 · Exploited CVE of the day
Collabora · Collabora Online – Built-in CODE Server
CVE-2026-110447
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
- In CISA KEV since
- Ransomware use
- Unknown
- EPSS
- 0.023 · top 17%scored 24 Oct 2026
- CVSS
- 9.2v4.0 · CNA
CISA remediation due
Picked: highest EPSS among KEV additions of the last 7 days, ransomware use as tie-break.
02 · Top 10 this week
Exploited this week
CVE-2026-110447 Collabora · Collabora Online – Built-in CODE Server
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
KEV 23 Oct 2026 · EPSS 0.023 · CVSS 9.2
CVE-2026-106931 EG Secure Solutions · SiteGuard Server Edition
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
KEV 20 Oct 2026 · EPSS 0.012 · CVSS 8.5
CVE-2026-96656 Plex · Media Server
Plex Media Server External Control of File Name or Path Vulnerability
KEV 20 Oct 2026 · EPSS 0.008 · CVSS 8.6
CVE-2026-114625 Arista · VeloCloud Orchestrator
Arista VeloCloud Orchestrator SQL Injection Vulnerability
KEV 23 Oct 2026 · EPSS 0.008 · CVSS 9.4
CVE-2026-96654 Plex · Media Server
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
KEV 20 Oct 2026 · EPSS 0.005 · CVSS 6.9
Critical in widely used software
CVE-2026-76466 Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series Remote Code Execution Vulnerability
published 21 Oct 2026 · CVSS 9.8 v3.1 · CNA · not known exploited
CISA SSVC: exploitation none, automatable yes, technical impact total
CVE-2026-76473 Cisco · Cisco Emergency Responder
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
published 21 Oct 2026 · CVSS 9.8 v3.1 · CNA · not known exploited
CISA SSVC: exploitation none, automatable yes, technical impact total
CVE-2026-109618 PHP Group · PHP
RCE via OOM corruption
published 21 Oct 2026 · CVSS 9.8 v3.1 · NVD · not known exploited · Debian DSA-6574-1
CISA SSVC: exploitation none, automatable no, technical impact total
CVE-2026-98959 Linux · Linux
btrfs: fix xattr replace when multiple xattrs are packed in the same item
published 23 Oct 2026 · CVSS 9.8 v3.1 · CNA · not known exploited
CVE-2026-99078 Linux · Linux
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
published 23 Oct 2026 · CVSS 9.8 v3.1 · CNA · not known exploited
How these are picked
Exploited this week: CVEs added to the CISA KEV catalog (exploitation confirmed by CISA) in the last 7 days, highest EPSS score first; known ransomware use, then the newest addition, break ties.
Critical in widely used software: CVEs published in the last 7 days with a CVSS base score of 9.0 or more (the highest score published by NVD or the CNA, v3.x or v4.0), in software on the watchlist below or named in a Debian security advisory. Ranked by CVSS score, then CISA’s SSVC ratings (exploitation, automatable, technical impact), then a Debian advisory, newest first, with at most two CVEs per watchlist product so one vendor’s patch day cannot fill the list. A CVE on this list is not known to be exploited unless it says “in KEV”.
Watchlist: PHP, OpenSSL, OpenSSH, Linux kernel, glibc, sudo, Apache HTTP Server, Apache Tomcat, nginx, Microsoft Windows, Microsoft Exchange, Google Chrome, Mozilla Firefox, Java, Node.js, Cisco, Fortinet, Ivanti, Citrix, VMware, Palo Alto PAN-OS.
NVD, CVE.org and Debian fetched 25 Oct, 03:31 UTC
03 · Featured tool
DORA Register of Information IN-BROWSER
Compile DORA ICT third-party register, completeness checks.
KEV this week: 8 additions · dashboard →
PRICE Free
No account · no tracking · 82% of tools run in your browser
KEV + EPSS fetched 03:31 UTC · hosted in Germany