AX·NEWS
Sign in

CVE watch

CVEs of week 42, 2026 (12 Oct – 18 Oct)

23 vulnerabilities first quoted by the shared stories that week, most severe first.

RSS feedOn your SOC screen

  1. CVE-2021-44228 10.0 Exploited September 2026 CVE Landscape Log4j < 2.3.1 · < 2.12.2 · < 2.15.0 +1 1 outlet
  2. CVE-2019-0708 9.8 Exploited September 2026 CVE Landscape Windows 7 all versions 1 outlet
  3. CVE-2026-102764 9.3 Exploited Prolific Chinese espionage group exploits BeyondTrust zero-day BeyondTrust Remote Support ≤ 26.2.3 4 outlets
  4. CVE-2026-99999 9.3 Did Ukraine's Drone Strikes Really Take Down Russian Bots? | Threat Wire Linux 2.6.27 4 outlets
  5. CVE-2026-110447 9.2 Exploited CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud Collabora Online - Built-in CODE… < 26.4.303 2 outlets
  6. CVE-2026-96951 8.8 Exploited Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities Outlook WEB all versions 5 outlets
  7. CVE-2026-104935 8.6 Exploited CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts Connect Secure < 25.1.1.2 · < 25.1.3.0 · 22.8 3 outlets
  8. CVE-2026-0322 8.6 Exploited Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation Palo Alto Networks PAN-OS < 12.2.4 · < 12.1.10-h2 · < 11.2.16 +2 2 outlets
  9. CVE-2026-108398 Update Windows: Record Patch Tuesday fixes flaw already under attack 3 outlets
  10. CVE-2026-105445 Docker Hub flaw let attackers impersonate users, tamper with images 2 outlets
  11. CVE-2026-85097 Bricksforge WordPress Plugin Vulnerability Exploited in the Wild 2 outlets
  12. CVE-2026-92707 Update Windows: Record Patch Tuesday fixes flaw already under attack 2 outlets
  13. CVE-2021-38003 Exploited September 2026 CVE Landscape 1 outlet
  14. CVE-2022-0847 Exploited September 2026 CVE Landscape 1 outlet
  15. CVE-2022-22965 Exploited September 2026 CVE Landscape 1 outlet
  16. CVE-2025-39964 Exploited September 2026 CVE Landscape 1 outlet
  17. CVE-2025-61624 Exploited PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions 1 outlet
  18. CVE-2026-103849 Critical BlockStrap flaw lets hackers run code on Magento servers 1 outlet
  19. CVE-2026-105740 Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts 1 outlet
  20. CVE-2026-39919 Ghostscript flaw lets hackers hijack servers via PDF uploads 1 outlet
  21. CVE-2026-39987 Exploited September 2026 CVE Landscape 1 outlet
  22. CVE-2026-65616 From Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616) 1 outlet
  23. CVE-2026-74580 AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host 1 outlet