Vulnerabilities worth acting on
2tracked
1on CISA KEV
21unconfirmed
2026-10-26 12:09 UTC
Act now
Exploited in the wild or on CISA KEV. These are the ones to patch first.
Tracked
Known, but not yet seen exploited in the wild.
Emerging, not confirmed
Reported exploitation with no CVE yet, or none we have confirmed. Treat these as unverified until a CVE and a fixed version exist.
unconfirmed Arista patches new VeloCloud Orchestrator zero-day exploited in attacks Full Disclosure (seclists) · 2026-10-22 unconfirmed [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) Cisco Talos · 2026-10-20 unconfirmed [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) Cisco Talos · 2026-10-20