{"title":"Signals on CISA KEV CVEs","description":"Stories about CVEs CISA lists as exploited.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","title":"[FLASH 98] PHP2Shell Exploitation on Check Point Gateway","url":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","date":"2026-11-12T13:56:37","summary":"Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-109618","CVE-2026-109619","CVE-2026-115560","CVE-2026-73695"]},{"id":"https://security.paloaltonetworks.com/CVE-2026-111497","title":"[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)","url":"https://security.paloaltonetworks.com/CVE-2026-111497","date":"2026-11-09T21:00:00","summary":"Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-111497"]},{"id":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","title":"[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins","url":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","date":"2026-11-11T07:28:12","summary":"Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1","tags":["flash","vulnerability","CVE-2026-123158"]},{"id":"https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html","title":"[HIGH 74] Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover","url":"https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html","date":"2026-11-12T09:25:00","summary":"The Hacker News, 5 source(s). On CISA KEV Exploit public CVSS 9.5","tags":["high","vulnerability","CVE-2026-111560","CVE-2026-116606","CVE-2026-118383"]},{"id":"https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html","title":"[HIGH 56] SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access","url":"https://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.html","date":"2026-11-10T02:36:14","summary":"CSO Online, 11 source(s). On CISA KEV","tags":["high","vulnerability","CVE-2026-19868"]},{"id":"https://isc.sans.edu/diary/rss/33514","title":"[MEDIUM 54] Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)","url":"https://isc.sans.edu/diary/rss/33514","date":"2026-11-12T11:56:24","summary":"SANS ISC, 1 source(s). On CISA KEV Exploit public CVSS 9.8","tags":["medium","vulnerability","CVE-2026-102895"]},{"id":"https://socradar.io/blog/cve-2026-125350-google-chrome-xml-0day/","title":"[LOW 30] CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day","url":"https://socradar.io/blog/cve-2026-125350-google-chrome-xml-0day/","date":"2026-11-11T11:42:25","summary":"SOCRadar, 1 source(s). On CISA KEV","tags":["low","vulnerability","CVE-2026-125350"]},{"id":"https://www.tenable.com/blog/microsoft-november-2026-patch-tuesday-addresses-1093-cves-cve-2026-124194","title":"[LOW 29] Microsoft\u2019s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)","url":"https://www.tenable.com/blog/microsoft-november-2026-patch-tuesday-addresses-1093-cves-cve-2026-124194","date":"2026-11-10T19:01:34","summary":"Tenable, 1 source(s). On CISA KEV","tags":["low","vulnerability","CVE-2026-124194"]}]}