Known exploitedEdge gateways & VPNsAdded 16 Oct 2026
Fortinet Multiple Products Path Traversal Vulnerability (CVE-2025-61624)
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
Who should check: anyone running Fortinet Multiple Products on a server or appliance reachable from the internet.
How to check: look up the Multiple Products version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2025-61624 · CISA KEV
Known exploitedAtlassianAdded 15 Oct 2026
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589)
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.
Who should check: anyone running Atlassian Multiple Products on a server or appliance reachable from the internet.
How to check: look up the Multiple Products version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan includes a nuclei template for this CVE and checks your verified domain for it.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-21589 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 14 Oct 2026
Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322)
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
Who should check: anyone running Palo Alto Networks PAN-OS on a server or appliance reachable from the internet.
How to check: look up the PAN-OS version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-0322 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 13 Oct 2026
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935)
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
Who should check: anyone running Ivanti Connect Secure on a server or appliance reachable from the internet.
How to check: look up the Connect Secure version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan includes a nuclei template for this CVE and checks your verified domain for it.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-104935 · CISA KEV
Known exploitedStrapiAdded 8 Oct 2026
Strapi Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-22894)
Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution.
Who should check: anyone running Strapi Strapi on a server or appliance reachable from the internet.
How to check: look up the Strapi version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2023-22894 · CISA KEV
Known exploitedApacheAdded 8 Oct 2026
Apache Struts Command Injection Vulnerability (CVE-2016-3081)
Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.
Who should check: anyone running Apache Struts on a server or appliance reachable from the internet.
How to check: look up the Struts version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan includes a nuclei template for this CVE and checks your verified domain for it.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2016-3081 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 4 Oct 2026
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779)
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
Who should check: anyone running Citrix NetScaler on a server or appliance reachable from the internet.
How to check: look up the NetScaler version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-88779 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 1 Oct 2026
Fortinet FortiMail Path Traversal Vulnerability (CVE-2026-104286)
Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.
Who should check: anyone running Fortinet FortiMail on a server or appliance reachable from the internet.
How to check: look up the FortiMail version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-104286 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 27 Sept 2026
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88772)
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service
Who should check: anyone running Citrix NetScaler on a server or appliance reachable from the internet.
How to check: look up the NetScaler version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-88772 · CISA KEV
Known exploitedEdge gateways & VPNsAdded 27 Sept 2026
Citrix NetScaler Improper Input Validation Vulnerability (CVE-2026-88771)
Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.
Who should check: anyone running Citrix NetScaler on a server or appliance reachable from the internet.
How to check: look up the NetScaler version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-88771 · CISA KEV
Known exploitedWordPressAdded 25 Sept 2026
WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902)
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.
Who should check: anyone running WordPress Core on a server or appliance reachable from the internet.
How to check: look up the Core version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan includes a nuclei template for this CVE and checks your verified domain for it.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-87902 · CISA KEV
Known exploitedMicrosoft web serversAdded 25 Sept 2026
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660)
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
Who should check: anyone running Microsoft SharePoint on a server or appliance reachable from the internet.
How to check: look up the SharePoint version you run (admin console, package manager or your host) and compare it with the fixed release in the vendor advisory. Our Deep Scan runs the community nuclei templates for this product, which update daily as new checks are published.
What to do: apply the vendor's update or mitigation now. If you can't patch yet, take the service off the public internet until you can.
References: NVD CVE-2026-65660 · CISA KEV