Vulnpocalypse: Signals on CISA KEV CVEshttps://vulnpocalypse.dev/feeds/Stories about CVEs CISA lists as exploited.enThu, 12 Nov 2026 16:59:02 +0000[FLASH 98] PHP2Shell Exploitation on Check Point Gatewayhttps://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/Thu, 12 Nov 2026 13:56:37 +0000Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2flashvulnerabilityCVE-2026-109618CVE-2026-109619CVE-2026-115560CVE-2026-73695[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)https://security.paloaltonetworks.com/CVE-2026-111497https://security.paloaltonetworks.com/CVE-2026-111497Mon, 09 Nov 2026 21:00:00 +0000Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2flashvulnerabilityCVE-2026-111497[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Loginshttps://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/Wed, 11 Nov 2026 07:28:12 +0000Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1flashvulnerabilityCVE-2026-123158[HIGH 74] Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failoverhttps://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.htmlhttps://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.htmlThu, 12 Nov 2026 09:25:00 +0000The Hacker News, 5 source(s). On CISA KEV Exploit public CVSS 9.5highvulnerabilityCVE-2026-111560CVE-2026-116606CVE-2026-118383[HIGH 56] SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated accesshttps://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.htmlhttps://www.csoonline.com/article/4246479/sonicwall-releases-patches-for-7-flaws-in-its-firewalls-most-involving-unauthenticated-access.htmlTue, 10 Nov 2026 02:36:14 +0000CSO Online, 11 source(s). On CISA KEVhighvulnerabilityCVE-2026-19868[MEDIUM 54] Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)https://isc.sans.edu/diary/rss/33514https://isc.sans.edu/diary/rss/33514Thu, 12 Nov 2026 11:56:24 +0000SANS ISC, 1 source(s). On CISA KEV Exploit public CVSS 9.8mediumvulnerabilityCVE-2026-102895[LOW 30] CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Dayhttps://socradar.io/blog/cve-2026-125350-google-chrome-xml-0day/https://socradar.io/blog/cve-2026-125350-google-chrome-xml-0day/Wed, 11 Nov 2026 11:42:25 +0000SOCRadar, 1 source(s). On CISA KEVlowvulnerabilityCVE-2026-125350[LOW 29] Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)https://www.tenable.com/blog/microsoft-november-2026-patch-tuesday-addresses-1093-cves-cve-2026-124194https://www.tenable.com/blog/microsoft-november-2026-patch-tuesday-addresses-1093-cves-cve-2026-124194Tue, 10 Nov 2026 19:01:34 +0000Tenable, 1 source(s). On CISA KEVlowvulnerabilityCVE-2026-124194