https://vulnpocalypse.dev/feeds/Changes to the vulnerability data developers depend on: CVE, NVD, OSV, GHSA, CISA KEV and EPSS.enThu, 12 Nov 2026 16:59:02 +0000https://vulnpocalypse.dev/advisories/akamai-says-ai-found-bugs-mean-rethinking-exposure-response/https://vulnpocalypse.dev/advisories/akamai-says-ai-found-bugs-mean-rethinking-exposure-response/Thu, 12 Nov 2026 12:00:00 +0000Akamai published a blog post on AI finding vulnerabilities and rethinking exposure; only the headline was reviewed, so no action is confirmed.ai-toolsai-toolsvuln-datahttps://vulnpocalypse.dev/advisories/blue-initiative-launches-maritime-vulnerability-database-infosecurity-reports/https://vulnpocalypse.dev/advisories/blue-initiative-launches-maritime-vulnerability-database-infosecurity-reports/Wed, 11 Nov 2026 12:00:00 +0000Infosecurity Magazine reports an industry group launched a maritime CVE repository, so maritime IT and OT teams can evaluate it as an extra feed.ecosystemvuln-dataenterprisehttps://vulnpocalypse.dev/advisories/ai-found-vulnerabilities-exploitation-rate/https://vulnpocalypse.dev/advisories/ai-found-vulnerabilities-exploitation-rate/Wed, 11 Nov 2026 12:00:00 +0000VulnCheck found 1.3% of AI-found vulnerabilities exploited in 1H 2026, the same as all bugs. Patch AI-found CVEs by exposure, not by how they were found.ai-toolsai-toolsvuln-dataopen-sourcehttps://vulnpocalypse.dev/advisories/nvd-stops-enriching-most-cves/https://vulnpocalypse.dev/advisories/nvd-stops-enriching-most-cves/Wed, 11 Nov 2026 12:00:00 +0000Since 15 April 2026 NIST no longer adds severity scores or product data to most new CVEs. Tools that match on NVD data miss or misjudge risk.ecosystemvuln-dataopen-sourcehttps://vulnpocalypse.dev/advisories/vulncheck-says-anthropic-glasswing-cves-are-few-fixes-lag/https://vulnpocalypse.dev/advisories/vulncheck-says-anthropic-glasswing-cves-are-few-fixes-lag/Tue, 10 Nov 2026 12:00:00 +0000VulnCheck says 442 CVEs trace to Anthropic's Glasswing, 2 exploited; check those two CVEs and treat scanner reports as unverified.ai-toolsai-toolsopen-sourcevuln-datahttps://vulnpocalypse.dev/advisories/reversinglabs-reports-ai-linked-malware-signals-rising-no-clear-attack-surge/https://vulnpocalypse.dev/advisories/reversinglabs-reports-ai-linked-malware-signals-rising-no-clear-attack-surge/Tue, 10 Nov 2026 12:00:00 +0000ReversingLabs says LLM API references in malicious files are rising but no AI attack surge is shown; review exposure to PHP2Shell CVEs.ai-toolsai-toolsphpvuln-datahttps://vulnpocalypse.dev/advisories/mckinsey-report-critical-flaws-exploited-within-hours-of-disclosure/https://vulnpocalypse.dev/advisories/mckinsey-report-critical-flaws-exploited-within-hours-of-disclosure/Mon, 09 Nov 2026 12:00:00 +0000A McKinsey report says critical flaws are now exploited within hours of disclosure; measure and shorten how long you take to fix them on critical systems.ai-toolsai-toolsenterprisevuln-datahttps://vulnpocalypse.dev/advisories/palo-alto-networks-ceo-says-ai-finds-flaws-faster-than-firms-can-patch/https://vulnpocalypse.dev/advisories/palo-alto-networks-ceo-says-ai-finds-flaws-faster-than-firms-can-patch/Fri, 06 Nov 2026 12:00:00 +0000Palo Alto Networks CEO Nikesh Arora says AI finds software flaws faster than firms can fix them, so review triage capacity and interim virtual patching.ai-toolsai-toolsvuln-dataenterprisehttps://vulnpocalypse.dev/advisories/nikkei-reports-japan-to-seek-vulnerability-data-from-us-ai-firms/https://vulnpocalypse.dev/advisories/nikkei-reports-japan-to-seek-vulnerability-data-from-us-ai-firms/Fri, 06 Nov 2026 12:00:00 +0000Nikkei reports Japan wants early access to undisclosed vulnerability data from US AI firms; PHP CVE details are not confirmed, so check PHP patches.ai-toolsphpai-toolsvuln-datahttps://vulnpocalypse.dev/advisories/crowdstrike-reports-fast-exploitation-of-public-pocs-cites-cpanel-flaw/https://vulnpocalypse.dev/advisories/crowdstrike-reports-fast-exploitation-of-public-pocs-cites-cpanel-flaw/Thu, 05 Nov 2026 12:00:00 +0000CrowdStrike reports a median under one day from public PoC to exploitation, citing cPanel CVE-2026-41940; review exposed cPanel and WHM servers.exploitedwebopen-sourcevuln-datahttps://vulnpocalypse.dev/advisories/cloudflare-launches-zero-wire-a-public-hub-for-triaging-critical-internet-vulner/https://vulnpocalypse.dev/advisories/cloudflare-launches-zero-wire-a-public-hub-for-triaging-critical-internet-vulner/Wed, 04 Nov 2026 12:00:00 +0000Cloudflare launched Zero Wire on Radar, a public feed of briefings on critical vulnerabilities, with exploitation evidence kept separate from severity.ecosystemvuln-datawebphpcloudhttps://vulnpocalypse.dev/advisories/microsoft-analysis-78-of-exploited-vulnerabilities-are-system-takeover-flaws-and/https://vulnpocalypse.dev/advisories/microsoft-analysis-78-of-exploited-vulnerabilities-are-system-takeover-flaws-and/Tue, 03 Nov 2026 12:00:00 +0000Microsoft found that about 0.5% of disclosed CVEs are exploited, 78% of those enable system takeover, and patching on servers and appliances lags far behindexploitedenterpriseendpointnetwork-edgecloudvuln-datahttps://vulnpocalypse.dev/advisories/cisa-bod-26-04-three-day-kev-deadlines/https://vulnpocalypse.dev/advisories/cisa-bod-26-04-three-day-kev-deadlines/Mon, 02 Nov 2026 12:00:00 +0000CISA's BOD 26-04 sets patch deadlines by exposure, KEV status, automation and impact; the riskiest get 3 days. Track KEV dueDate and forensicTriage.ecosystemvuln-dataenterprise