AX·NEWS
Sign in

CVE watch

CVEs of week 41, 2026 (05 Oct – 11 Oct)

13 vulnerabilities first quoted by the shared stories that week, most severe first.

RSS feedOn your SOC screen

  1. CVE-2026-21589 9.3 Exploited Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Bitbucket Data Center < 9.4.26 · < 10.2.8 · < 10.5.1 4 outlets
  2. CVE-2026-105134 9.3 Exploited AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches AhsayCBS 9.15.2.0 → 10.3.4.44 (115 versions) 2 outlets
  3. CVE-2026-105133 5.5 Exploited AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches AhsayCBS 9.15.2.0 → 10.3.4.44 (115 versions) 2 outlets
  4. CVE-2026-102255 Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch 3 outlets
  5. CVE-2026-61500 Rejetto HFS servers now actively scanned for critical RCE flaw 3 outlets
  6. CVE-2026-107406 Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments 2 outlets
  7. CVE-2015-3306 Exploited Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies 1 outlet
  8. CVE-2026-106197 Update Chrome and ChromeOS to fix critical security issues 1 outlet
  9. CVE-2026-106240 Update Chrome and ChromeOS to fix critical security issues 1 outlet
  10. CVE-2026-106358 Update Chrome and ChromeOS to fix critical security issues 1 outlet
  11. CVE-2026-42271 Exploited Cryptomining malware used poetry to infect more than 3,400 servers, researchers say 1 outlet
  12. CVE-2026-65400 Exploited Apple and a Hacker’s Future 1 outlet
  13. CVE-2026-96940 Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes 1 outlet