{"schema_version":1,"generated_at":"2026-10-26T01:28:34+00:00","window_days":30,"scope":"Public government and vendor advisories. This feed does not describe DSC client incidents or measure attacks.","items":[{"key":"3673f7a4a7cc70846ab5","title":"CVE-2026-110447 \u2014 Collabora Online \u2013 Built-in CODE Server (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-110447","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-110447"],"exploited":true,"kev":true,"published_at":"2026-10-23T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"0a46a6aa41f13c89e5fe","title":"CVE-2026-114625 \u2014 Arista VeloCloud Orchestrator (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-114625","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-114625"],"exploited":true,"kev":true,"published_at":"2026-10-23T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"540270639ced812c7abf","title":"Critical security issue affecting PHP","url":"https:\/\/www.ncsc.gov.uk\/news\/critical-security-issue-affecting-php","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":["CVE-2026-109618","CVE-2026-109619"],"exploited":false,"kev":false,"published_at":"2026-10-21T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"523c38251124482304e9","title":"PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-186","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"critical","cves":["CVE-2026-109618","CVE-2026-109619"],"exploited":false,"kev":false,"published_at":"2026-10-21T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"c4a53806f6f020c35d4c","title":"Introducing a new AI chapter in the NCSC research problem book","url":"https:\/\/www.ncsc.gov.uk\/blogs\/introducing-new-ai-chapter-ncsc-research-problem-book","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-20T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"ea4de4cac790e8856993","title":"CVE-2026-106931 \u2014 EG Secure Solutions SiteGuard Server Edition (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-106931","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-106931"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"d085d248ba6cb686b825","title":"CVE-2026-110936 \u2014 Siemens Software Center (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-110936","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-110936"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"1963578e5a03d6af2b50","title":"CVE-2026-96656 \u2014 Plex Media Server (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-96656","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-96656"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"54e55312e25ea812d256","title":"CVE-2026-96655 \u2014 Plex Media Server (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-96655","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-96655"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"00462a00acf3c0b67429","title":"CVE-2026-96654 \u2014 Plex Media Server (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-96654","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-96654"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"89e73b08a125d6062b62","title":"CVE-2026-96652 \u2014 Plex Media Server (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-96652","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-96652"],"exploited":true,"kev":true,"published_at":"2026-10-20T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"c478ca00659ad33602cd","title":"CVE-2025-61624 \u2014 Fortinet Multiple Products (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-61624","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2025-61624"],"exploited":true,"kev":true,"published_at":"2026-10-16T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"fe2b497ed38ed278139f","title":"CVE-2026-102764 \u2014 BeyondTrust Remote Support (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-102764","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-102764"],"exploited":true,"kev":true,"published_at":"2026-10-16T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"c62bcfc8b9d78a0a2e66","title":"CVE-2026-80092 \u2014 Microsoft Identity Web Elevation of Privilege Vulnerability","url":"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-80092","publisher":"Microsoft MSRC","source":"msrc","kind":"vulnerability","severity":"high","cves":["CVE-2026-80092"],"exploited":false,"kev":false,"published_at":"2026-10-15T14:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"92b5653f9fc6a0bafdd5","title":"Post-quantum updates to our TLS guidance","url":"https:\/\/www.ncsc.gov.uk\/blogs\/post-quantum-updates-to-our-tls-guidance","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-15T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"4bbf113d54e5ec8e195a","title":"Using TLS to protect data","url":"https:\/\/www.ncsc.gov.uk\/guidance\/using-tls-to-protect-data","publisher":"NCSC","source":"ncsc_guidance","kind":"guidance","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-15T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"a3a17610efacd4873ee6","title":"CVE-2026-21589 \u2014 Atlassian Multiple Products (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-21589","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-21589"],"exploited":true,"kev":true,"published_at":"2026-10-15T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"15786611751894e04ef4","title":"CVE-2026-105134 \u2014 Ahsay AhsayCBS (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-105134","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-105134"],"exploited":true,"kev":true,"published_at":"2026-10-14T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"c511017a473dcdbddbec","title":"CVE-2026-105133 \u2014 Ahsay AhsayCBS (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-105133","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-105133"],"exploited":true,"kev":true,"published_at":"2026-10-14T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"f993e26ddd083fdbbd91","title":"CVE-2026-76519 \u2014 Cisco Secure Email Gateway (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-76519","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-76519"],"exploited":true,"kev":true,"published_at":"2026-10-14T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"8791ef0269222537a430","title":"CVE-2026-0322 \u2014 Palo Alto Networks PAN-OS (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-0322","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-0322"],"exploited":true,"kev":true,"published_at":"2026-10-14T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"72f75d112e43529b923e","title":"CVE-2026-70197 \u2014 .NET Remote Code Execution Vulnerability","url":"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-70197","publisher":"Microsoft MSRC","source":"msrc","kind":"vulnerability","severity":"high","cves":["CVE-2026-70197"],"exploited":false,"kev":false,"published_at":"2026-10-13T14:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"5f9279830c8fe4c3d34b","title":"arbitrary command execution in fgfmsd daemon","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-177","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"medium","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"92a67f594a3bdc97f1da","title":"SQL command injection in webmail","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-184","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"high","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"aa693963c5cd3fb5d47e","title":"Persistent Denial of Service in Admin Profile","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-176","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"medium","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"ab8c6854264e0656b638","title":"Multiple Arbitrary File Read\/Write via SQL Injection","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-178","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"high","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"6aacbded8f554c94e1f7","title":"Improper access control and session management in the web management interface","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-185","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"critical","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"5be98f6243a396140696","title":"HTML injection in WebUI","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-20-005","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"medium","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"a25f82ad500ed910bdc6","title":"GUI Denial of Service","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-181","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"medium","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"1b94cf072c96f2a78a91","title":"Fabric API Authentication bypass","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-179","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"medium","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"cece0cdc58d98449902c","title":"Double free in signal handler","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-182","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"low","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"a56c61110f38150b4667","title":"Broken authorization","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-183","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"low","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"08eed6f54284624fb8b6","title":"Arbitrary file write in grpc phQueryMaster","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-180","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"critical","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-13T07:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"97cfe7a4db2684208703","title":"CVE-2026-96951 \u2014 Microsoft Windows (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-96951","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-96951"],"exploited":true,"kev":true,"published_at":"2026-10-13T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"41b40b8f4d7809024757","title":"CVE-2026-104935 \u2014 Ivanti Connect Secure (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-104935","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-104935"],"exploited":true,"kev":true,"published_at":"2026-10-13T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"06b4f5ca79b61b9c6a43","title":"Help the NCSC understand how organisations approach external attack surface risk","url":"https:\/\/www.ncsc.gov.uk\/blogs\/help-ncsc-understand-how-organisations-approach-external-attack-surface-risk","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-12T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"ea1b72c00424f95400af","title":"China-linked malicious actors called out by UK and international partners for targeting sensitive data globally","url":"https:\/\/www.ncsc.gov.uk\/news\/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-08T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"40b96a8d57fad3c56d4d","title":"CVE-2023-22894 \u2014 Strapi (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-22894","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2023-22894"],"exploited":true,"kev":true,"published_at":"2026-10-08T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"d4685c46f06b151d01da","title":"CVE-2015-5477 \u2014 ISC BIND (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-5477","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2015-5477"],"exploited":true,"kev":true,"published_at":"2026-10-08T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"080a68ef936f69dbd270","title":"CVE-2016-3081 \u2014 Apache Struts (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2016-3081","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2016-3081"],"exploited":true,"kev":true,"published_at":"2026-10-08T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"d98a968a0007a2d86ab9","title":"CVE-2021-3199 \u2014 ONLYOFFICE Docs (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-3199","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2021-3199"],"exploited":true,"kev":true,"published_at":"2026-10-08T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"6dcb06d47feb7db97dcb","title":"CVE-2015-3306 \u2014 ProFTPD (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2015-3306","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2015-3306"],"exploited":true,"kev":true,"published_at":"2026-10-08T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"9fcd7ee691ba13aac0e9","title":"Incident affecting ASOS customers","url":"https:\/\/www.ncsc.gov.uk\/news\/incident-affecting-asos-customers","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"info","cves":[],"exploited":false,"kev":false,"published_at":"2026-10-06T12:00:00+00:00","action":"Read the original guidance and review how it applies to your organisation."},{"key":"f497a2688e9b4b42ee63","title":"CVE-2026-88779 \u2014 Citrix NetScaler (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-88779","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-88779"],"exploited":true,"kev":true,"published_at":"2026-10-04T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"faa5385790ffa1e9fab0","title":"CVE-2026-96940 \u2014 Microsoft Exchange Server Elevation of Privilege Vulnerability","url":"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-96940","publisher":"Microsoft MSRC","source":"msrc","kind":"vulnerability","severity":"high","cves":["CVE-2026-96940"],"exploited":false,"kev":false,"published_at":"2026-10-02T14:00:00+00:00","action":"Check affected versions and the publisher\u2019s recommended action before scheduling an update."},{"key":"fccf8013a6a84b204479","title":"CVE-2026-102489 \u2014 Zammad (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-102489","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-102489"],"exploited":true,"kev":true,"published_at":"2026-10-02T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"62c21b0122fe44727d06","title":"CVE-2026-102490 \u2014 Zammad (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-102490","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-102490"],"exploited":true,"kev":true,"published_at":"2026-10-02T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"c04b9a1bd555a3106fea","title":"Improper limitation of a pathname to a restricted directory","url":"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-26-175","publisher":"Fortinet PSIRT","source":"fortinet_psirt","kind":"advisory","severity":"critical","cves":[],"exploited":true,"kev":false,"published_at":"2026-10-01T07:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"f96b357b5518a60e06f0","title":"CVE-2026-104286 \u2014 Fortinet FortiMail (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-104286","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-104286"],"exploited":true,"kev":true,"published_at":"2026-10-01T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"9d44263a3e24d54e8fc0","title":"CVE-2026-76504 \u2014 Cisco Catalyst SD-WAN Manager (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-76504","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-76504"],"exploited":true,"kev":true,"published_at":"2026-09-30T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"ba38c393313e8ccb5c23","title":"CVE-2026-86950 \u2014 Apple Multiple Products (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-86950","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-86950"],"exploited":true,"kev":true,"published_at":"2026-09-29T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"442544e8bc219f4edf52","title":"Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway","url":"https:\/\/www.ncsc.gov.uk\/news\/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway","publisher":"NCSC","source":"ncsc_blog","kind":"blog","severity":"high","cves":[],"exploited":true,"kev":false,"published_at":"2026-09-28T12:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"ccf81001f600fdd6f8e0","title":"CVE-2026-88772 \u2014 Citrix NetScaler (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-88772","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"high","cves":["CVE-2026-88772"],"exploited":true,"kev":true,"published_at":"2026-09-27T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."},{"key":"6dbc5128c5459c7544f7","title":"CVE-2026-88771 \u2014 Citrix NetScaler (CISA KEV)","url":"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-88771","publisher":"CISA KEV","source":"cisa_kev","kind":"vulnerability","severity":"critical","cves":["CVE-2026-88771"],"exploited":true,"kev":true,"published_at":"2026-09-27T00:00:00+00:00","action":"Check whether the affected product is in use. Follow the publisher\u2019s mitigation and update guidance, prioritising exposed systems."}],"sources":[{"key":"ncsc_news","name":"NCSC","state":"current","checked_at":"2026-10-26T01:23:02+00:00"},{"key":"ncsc_guidance","name":"NCSC","state":"current","checked_at":"2026-10-26T01:23:02+00:00"},{"key":"ncsc_reports","name":"NCSC","state":"current","checked_at":"2026-10-26T01:23:02+00:00"},{"key":"ncsc_blog","name":"NCSC","state":"current","checked_at":"2026-10-26T01:23:03+00:00"},{"key":"cisa_alerts","name":"CISA","state":"unavailable","checked_at":null},{"key":"cisa_advisories","name":"CISA","state":"unavailable","checked_at":null},{"key":"cisa_ics","name":"CISA","state":"unavailable","checked_at":null},{"key":"cisa_kev","name":"CISA KEV","state":"current","checked_at":"2026-10-26T01:23:03+00:00"},{"key":"msrc","name":"Microsoft MSRC","state":"current","checked_at":"2026-10-26T01:25:54+00:00"},{"key":"fortinet_psirt","name":"Fortinet PSIRT","state":"current","checked_at":"2026-10-26T01:25:55+00:00"}],"counts":{"advisories":54,"exploited":32,"publishers":4,"current_sources":7}}