active-exploitation

Patch now · Exploited · ●Patched · since 10 Nov 2026 · updated 11 Nov 2026 · CVE-2026-124194

Microsoft addressed a heavily exploited zero-day vulnerability in Outlook during its November 2026 Patch Tuesday updates. The flaw is part of a broader batch of security fixes released by the vendor.

Do:Apply the latest security updates provided by Microsoft for Outlook.

Patch now · Exploited · since 10 Nov 2026 · updated 11 Nov 2026

An authentication bypass flaw in Xen Orchestra and Xen Orchestra Appliance is actively exploited in the wild. Vates has issued an advisory urging immediate action.

Do:Check the vendor advisory for available updates and apply patches immediately.

Patch now · Exploited · since 3 Nov 2026 · CVE-2026-58115

Attackers are actively exploiting a maximum-severity missing authentication vulnerability in Siemens SIMATIC IoT2050 Advanced devices. The flaw allows unauthenticated remote attackers to execute arbitrary code and install backdoors.

Do:Check vendor advisories for updates and restrict network access to vulnerable devices.

Patch now · Exploited · ○No patch yet · since 27 Sep 2026

Citrix NetScaler ADC and Gateway contain critical unauthenticated remote code execution vulnerabilities that are actively exploited in the wild. Administrators must update affected software and perform a compromise assessment.

Do:Update affected Citrix NetScaler ADC and Gateway software and run a compromise assessment.

Patch now · Exploited · ●Patched · since 14 Oct 2026 · updated 3 Nov 2026

Cisco published an advisory for a critical vulnerability in the Advanced Malware Protection feature of Cisco Secure Email Gateway. The flaw allows unauthenticated attackers to execute arbitrary commands with root privileges and is actively exploited.

Do:Update the Content Scanner Tools package or upgrade Cisco AsyncOS Software to a fixed release.

Patch now · Exploited · ●Patched · since 22 Sep 2026