kev
4 live · 4 on record · last incident 15 days ago
Live4
- live4.3Ivanti Connect Secure CVE-2026-118527: Ivanti Connect Secure Identifier Generation Flaw
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 2 Nov 2026 · CVE-2026-118527
Ivanti Connect Secure contains a predictable identifier vulnerability that enables remote authenticated users to upload arbitrary files to disk. CISA added the issue to its Known Exploited Vulnerabilities catalog.
Do:Update Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6.
- live7.0Ivanti Connect Secure CVE-2026-111357: Ivanti Connect Secure Authentication Bypass
Patch now · Exploited · Patched · since 30 Oct 2026 · updated 31 Oct 2026 · CVE-2026-111357
Ivanti Connect Secure contains a missing authentication vulnerability that allows local attackers to escalate privileges. CISA confirmed active exploitation in the wild.
Do:Update Ivanti Connect Secure to 25.1.1.3 or 22.8R2.6.
- live7.8Linux Kernel CVE-2026-46300: Linux Kernel Missing Variable Initialization Vulnerability
Patch now · Exploited · Partly patched · since 28 Oct 2026 · CVE-2026-46300
The Linux Kernel contains a variable initialization flaw that causes ESP input processing to decrypt shared fragments in place, allowing for unintended page-cache data modification. CISA added this vulnerability to its KEV catalog following confirmed exploitation.
Do:Apply mitigations according to vendor instructions.
- live2.7VMware ESX CVE-2026-41709: Broadcom VMware ESX Insufficient Logging Vulnerability
Patch now · Exploited · Partly patched · since 28 Oct 2026 · updated 29 Oct 2026 · CVE-2026-41709
Broadcom VMware ESX contains an insufficient logging vulnerability allowing administrators to perform operations without logging. Exploitation in the wild is confirmed by CISA.
Do:Apply mitigations in accordance with vendor instructions and CISA guidance.
Earlier0
Nothing closed yet.