DSC THREAT OBSERVATORY 01 / GLOBAL CONTEXT

A clearer view of
what matters.

Security intelligence, made useful. Public advisories from the people who investigate threats and build the technology you depend on.

Explore the briefing ↓

7 feeds currentSnapshot 26 Oct 2026 · 00:10 UTC

PUBLIC INTELLIGENCE GLOBAL PERSPECTIVE

Drag to explore · Earth illustration, not attack telemetry

Recent advisories54In this collection · last 30 days ↗ Exploitation reported32In this collection · last 30 days ↗ Publishers represented4In this collection · last 30 days ↗ Feeds checked within 6h7Source health below ↗

02 / THE BRIEFING

Signal, with a source.

JSON feed ↗

⌕ Publisher Exploitation reported

CISA KEV23 Oct 2026Exploitation reported

CVE-2026-110447 — Collabora Online – Built-in CODE Server (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-110447

CISA KEV23 Oct 2026Exploitation reported

CVE-2026-114625 — Arista VeloCloud Orchestrator (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-114625

NCSC21 Oct 2026

Critical security issue affecting PHP ↗

Read the original guidance and review how it applies to your organisation.

CVE-2026-109618 · CVE-2026-109619

Fortinet PSIRT21 Oct 2026

PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

CVE-2026-109618 · CVE-2026-109619

NCSC20 Oct 2026

Introducing a new AI chapter in the NCSC research problem book ↗

Read the original guidance and review how it applies to your organisation.

Blog

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-106931 — EG Secure Solutions SiteGuard Server Edition (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-106931

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-110936 — Siemens Software Center (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-110936

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-96656 — Plex Media Server (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-96656

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-96655 — Plex Media Server (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-96655

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-96654 — Plex Media Server (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-96654

CISA KEV20 Oct 2026Exploitation reported

CVE-2026-96652 — Plex Media Server (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-96652

CISA KEV16 Oct 2026Exploitation reported

CVE-2025-61624 — Fortinet Multiple Products (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2025-61624

CISA KEV16 Oct 2026Exploitation reported

CVE-2026-102764 — BeyondTrust Remote Support (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-102764

Microsoft MSRC15 Oct 2026

CVE-2026-80092 — Microsoft Identity Web Elevation of Privilege Vulnerability ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

CVE-2026-80092

NCSC15 Oct 2026

Post-quantum updates to our TLS guidance ↗

Read the original guidance and review how it applies to your organisation.

Blog

NCSC15 Oct 2026

Using TLS to protect data ↗

Read the original guidance and review how it applies to your organisation.

Guidance

CISA KEV15 Oct 2026Exploitation reported

CVE-2026-21589 — Atlassian Multiple Products (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-21589

CISA KEV14 Oct 2026Exploitation reported

CVE-2026-105134 — Ahsay AhsayCBS (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-105134

CISA KEV14 Oct 2026Exploitation reported

CVE-2026-105133 — Ahsay AhsayCBS (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-105133

CISA KEV14 Oct 2026Exploitation reported

CVE-2026-76519 — Cisco Secure Email Gateway (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-76519

CISA KEV14 Oct 2026Exploitation reported

CVE-2026-0322 — Palo Alto Networks PAN-OS (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-0322

Microsoft MSRC13 Oct 2026

CVE-2026-70197 — .NET Remote Code Execution Vulnerability ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

CVE-2026-70197

Fortinet PSIRT13 Oct 2026

arbitrary command execution in fgfmsd daemon ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

SQL command injection in webmail ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Persistent Denial of Service in Admin Profile ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Multiple Arbitrary File Read/Write via SQL Injection ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Improper access control and session management in the web management interface ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

HTML injection in WebUI ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

GUI Denial of Service ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Fabric API Authentication bypass ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Double free in signal handler ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Broken authorization ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

Fortinet PSIRT13 Oct 2026

Arbitrary file write in grpc phQueryMaster ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

Advisory

CISA KEV13 Oct 2026Exploitation reported

CVE-2026-96951 — Microsoft Windows (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-96951

CISA KEV13 Oct 2026Exploitation reported

CVE-2026-104935 — Ivanti Connect Secure (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-104935

NCSC12 Oct 2026

Help the NCSC understand how organisations approach external attack surface risk ↗

Read the original guidance and review how it applies to your organisation.

Blog

NCSC08 Oct 2026

China-linked malicious actors called out by UK and international partners for targeting sensitive data globally ↗

Read the original guidance and review how it applies to your organisation.

Blog

CISA KEV08 Oct 2026Exploitation reported

CVE-2023-22894 — Strapi (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2023-22894

CISA KEV08 Oct 2026Exploitation reported

CVE-2015-5477 — ISC BIND (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2015-5477

CISA KEV08 Oct 2026Exploitation reported

CVE-2016-3081 — Apache Struts (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2016-3081

CISA KEV08 Oct 2026Exploitation reported

CVE-2021-3199 — ONLYOFFICE Docs (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2021-3199

CISA KEV08 Oct 2026Exploitation reported

CVE-2015-3306 — ProFTPD (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2015-3306

NCSC06 Oct 2026

Incident affecting ASOS customers ↗

Read the original guidance and review how it applies to your organisation.

Blog

CISA KEV04 Oct 2026Exploitation reported

CVE-2026-88779 — Citrix NetScaler (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-88779

Microsoft MSRC02 Oct 2026

CVE-2026-96940 — Microsoft Exchange Server Elevation of Privilege Vulnerability ↗

Check affected versions and the publisher’s recommended action before scheduling an update.

CVE-2026-96940

CISA KEV02 Oct 2026Exploitation reported

CVE-2026-102489 — Zammad (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-102489

CISA KEV02 Oct 2026Exploitation reported

CVE-2026-102490 — Zammad (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-102490

Fortinet PSIRT01 Oct 2026Exploitation reported

Improper limitation of a pathname to a restricted directory ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

Advisory

CISA KEV01 Oct 2026Exploitation reported

CVE-2026-104286 — Fortinet FortiMail (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-104286

CISA KEV30 Sep 2026Exploitation reported

CVE-2026-76504 — Cisco Catalyst SD-WAN Manager (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-76504

CISA KEV29 Sep 2026Exploitation reported

CVE-2026-86950 — Apple Multiple Products (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-86950

NCSC28 Sep 2026Exploitation reported

Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

Blog

CISA KEV27 Sep 2026Exploitation reported

CVE-2026-88772 — Citrix NetScaler (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-88772

CISA KEV27 Sep 2026Exploitation reported

CVE-2026-88771 — Citrix NetScaler (CISA KEV) ↗

Check whether the affected product is in use. Follow the publisher’s mitigation and update guidance, prioritising exposed systems.

CVE-2026-88771

04 / PROVENANCE

Know where it comes from.

Refreshed from stored feeds · hourly ingestion

Public government and vendor advisories. This feed does not describe DSC client incidents or measure attacks. Counts describe this bounded collection; they are not a global threat level. A publisher reporting exploitation does not establish that your systems are affected.

NCSCncsc newsCurrent25 Oct · 23:23 UTC

NCSCncsc guidanceCurrent25 Oct · 23:23 UTC

NCSCncsc reportsCurrent25 Oct · 23:23 UTC

NCSCncsc blogCurrent25 Oct · 23:23 UTC

CISAcisa alertsUnavailableNo successful sync recorded

CISAcisa advisoriesUnavailableNo successful sync recorded

CISAcisa icsUnavailableNo successful sync recorded

CISA KEVcisa kevCurrent25 Oct · 23:23 UTC

Microsoft MSRCmsrcCurrent25 Oct · 23:25 UTC

Fortinet PSIRTfortinet psirtCurrent25 Oct · 23:25 UTC

A clearer view ofwhat matters.

Signal, with a source.

Know where it comes from.

A clearer view of
what matters.