Security — Exploited & Patch Tuesday
KEV & Patch Tuesday
CISA's Known Exploited Vulnerabilities catalogue — 1,773 entries confirmed under attack in the real world — tracked against Microsoft's second-Tuesday release cadence. Sorted by what has a deadline attached, because a KEV listing you have already blown the date on is not a reading item.
was the previous second Tuesday, 0 days ago. CISA has added 0 vulnerabilities to the exploited catalogue since then.
KEV is CISA's exploited-in-the-wild catalogue, not Microsoft's release manifest — this is what became known-exploited in the window, not the size of the patch drop. We do not have a source for the latter, so we do not print a number for it.
Vendor concentrationlast 90 days · 108 additions
Most recent additionsnewest 15
| CVE | Vendor / product | Vulnerability | Added | CISA due date |
|---|---|---|---|---|
| CVE-2026-102895 | GPUStackGPUStack | GPUStack Improper Authentication Vulnerability | 12 Nov 20262d left | |
| CVE-2026-116779 | SignalWireFreeSwitch | SignalWire FreeSwitch Code Injection Vulnerability | 12 Nov 20262d left | |
| CVE-2026-123158 | OpenBSDOpenSSH | OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability | 12 Nov 20262d left | |
| CVE-2026-123218 | IBMAspera Faspex | IBM Aspera Faspex Incorrect Authorization Vulnerability | 12 Nov 20262d left | |
| CVE-2026-19868 | SonicWallSonicOS SSLVPN | SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability | 20 Nov 202610d left | |
| CVE-2024-27834 | AppleMultiple Products | Apple Multiple Products Improper Authentication Vulnerability | 18 Nov 20268d left | |
| CVE-2026-119977 | WordPressWordPress Core | WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability | 06 Nov 20264d overdue | |
| CVE-2026-111357 | IvantiConnect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | 02 Nov 20268d overdue | |
| CVE-2026-118527 | IvantiConnect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | 13 Nov 20263d left | |
| CVE-2026-76418 | CiscoSecure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 01 Nov 20269d overdue | |
| CVE-2026-97229 | GitLabCommunity Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 01 Nov 20269d overdue | |
| CVE-2026-41709 | BroadcomVMware ESX | Broadcom VMWare ESX Insufficient Logging Vulnerability | 11 Nov 20261d left | |
| CVE-2026-46300 | LinuxKernel | Linux Kernel Missing Initialization of a Variable Vulnerability | 31 Oct 202610d overdue | |
| CVE-2026-111497 | GoogleBrotli | Google Brotli Unchecked Return Value Vulnerability | 10 Nov 2026due today | |
| CVE-2026-48356 | AdobeCommerce and Magento | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 10 Nov 2026due today |
Due dates are CISA's binding operational directive deadlines for federal civilian agencies. Everyone else should read them as the date the exploitation curve is expected to have peaked.