Published CVE NIST NVD
55,804 9 months
July: 9,919 (+24% vs. previous month)
Nov 2025Jul 2026
LIVE, READERS
Global Network Activity Map
Real-time global network and scanning activity from open, public data sets. Updated periodically.
Sources: abuse.ch, SANS Internet Storm Center
- Net node
- server included in bothe.ch public lists of harmful servers. Network administrators usually block such addresses in a firewall.
- Scanning
- the address that the SANS ISC sensors have seen on a massive basis test the open ports of other computers.
- Point on map
- the country where the address is registered. The point is in the middle of the country, not in the exact location of the address, and the purpose of the data is unknown - these are global lists.
Showed on map
0
Head type
-
Head origin
-
i Real-time network and scanning activity indicators from open, public data sets. Last update: -
ANNUAL TRENDS
Imperfection Trends
Official totals of the past 12 full months from sources - how vulnerable is published, how critical and attached to the catalogue actively used.
Source: NIST NVD, ENISA EUVD, CISA KEV
Critical CVSS 9-10, ENISA EUVD
10,734 12 months
October: 1.615 (+3% vs. previous month)
Nov 2025Oct 2026
This month to date: 507
Assets used CISA KEV
313 12 months
October: 36 (-16% vs. previous month)
Nov 2025Oct 2026
This month to date: 13
EUROPEAN, ENISA EUVD
European vulnerability database (ENISA EUVD)
ENISA's EU vulnerability database - critical and actively used vulnerabilities from European sources (CIRCL, CERT-EU, etc.) is complemented by the possibility of using EPSS.
Source: ENISA EUVD
- CVE
- unique Vulnerabilities and Exposure.
- CWE
- vulnerability type classification: Common Weakness Enumeration.
- EPSS
- the estimated probability that vulnerability will be used in the next 30 days (Exploit Predication Scoring System).
Critical CVSS 9.0-10.0
Highest severity. Large potential effects - immediate updating is recommended, even without known use.
9.1
CVSS
traccar - Critical vulnerability
CVE-2026-126777
EPSS 0.0%
9.6
CVSS
getfider - Critical vulnerability
CVE-2026-65840
EPSS 0.0%
9.3
CVSS
OpsTree Solutions - Critical vulnerability
CVE-2026-126768
EPSS 0.0%
9.1
CVSS
Sipay Electronic Money and Payment Services Inc. - Critical vulnerability
CVE-2026-85632
EPSS 0.0%
9.1
CVSS
SaturdayDrive - Critical vulnerability
CVE-2026-126537
EPSS 0.0%
9.3
CVSS
Enter - Critical vulnerability
CVE-2026-112174
EPSS 0.0%
9.3
CVSS
WWBN - Critical vulnerability
CVE-2026-126542
EPSS 0.0%
9.2
CVSS
directus - Critical vulnerability
CVE-2026-126539
EPSS 0.0%
9.9
CVSS
Adobe - Critical vulnerability
CVE-2026-119017
EPSS 0.0%
9.9
CVSS
Adobe - Critical vulnerability
CVE-2026-113580
EPSS 0.0%
9.9
CVSS
Adobe - Critical vulnerability
CVE-2026-113579
EPSS 0.0%
9.9
CVSS
Microsoft - Critical vulnerability
CVE-2026-120002
EPSS 0.0%
9.8
CVSS
Microsoft - Critical vulnerability
CVE-2026-116945
EPSS 0.0%
9.8
CVSS
Microsoft - Critical vulnerability
CVE-2026-114160
EPSS 0.0%
9.6
CVSS
Google - Critical vulnerability
CVE-2026-125347
EPSS 0.0%
Assets used in real environment
Imperfections already used by attackers in real attacks (EUVD marked with date of use). Prevent priority regardless of CVSS.
6.5
CVSS
√ Assets used
Microsoft - Medium risk vulnerability
CVE-2026-124194
EPSS 0.0%
8.8
CVSS
√ Assets used
Google - High risk vulnerability
CVE-2026-125350
EPSS 0.0%
9.8
CVSS
√ Assets used
IBM - Critical vulnerability
CVE-2026-123218
EPSS 0.4%
7.5
CVSS
√ Assets used
SonicWall - High risk vulnerability
CVE-2026-19868
EPSS 0.6%
9.8
CVSS
√ Assets used
signalwire - Critical vulnerability
CVE-2026-116779
EPSS 1.3%
8.1
CVSS
√ Assets used
OpenBSD - High risk vulnerability
CVE-2026-123158
EPSS 1.0%
9.8
CVSS
√ Assets used
gpustack - Critical vulnerability
CVE-2026-102895
EPSS 0.3%
4.3
CVSS
√ Assets used
Ivanti - Medium risk vulnerability
CVE-2026-118527
EPSS 0.8%
8.6
CVSS
√ Assets used
Barracuda Networks - High risk vulnerability
CVE-2026-111560
EPSS 1.1%
8.1
CVSS
√ Assets used
WordPress Foundation - High risk vulnerability
CVE-2026-119977
EPSS 1.2%
8.6
CVSS
√ Assets used
Cisco - High risk vulnerability
CVE-2026-76418
EPSS 0.8%
9.4
CVSS
√ Assets used
Arista Networks - Critical vulnerability
CVE-2026-114625
EPSS 1.0%
9.2
CVSS
√ Assets used
Google - Critical vulnerability
CVE-2026-111497
EPSS 88.0%
9.2
CVSS
√ Assets used
PHP Group - Critical vulnerability
CVE-2026-109618
EPSS 100.0%
7.0
CVSS
√ Assets used
Ivanti - High risk vulnerability
CVE-2026-111357
EPSS 0.5%
i The list shall be updated periodically from the ENISA EUVD. The same CVE can also appear in the list of NSAs below - these are different sources.
PRIORITY, CISA KEV
Priority Anti-Risks (CISA KEV)
Imperfections listed by CISA as a priority in the avoidable catalogue. The federal authorities must eliminate them within a certain timeframe - good practice for others too. Updated periodically.
Source: CISA KEV katalogs
CVE-2026-125350
Google Chromium - Use of released memory
Deadline: 2026-11-24
CVE-2026-124194
Microsoft Office - Actively used vulnerability
Deadline: 2026-11-24
CVE-2026-111793
Openwave Messaging Limited Webtop Media Transcoder Incorrect transfer of resources between safe harbours
Deadline: 2026-11-24
CVE-2026-20320
Cisco BroadWorks - processing of XML external entities (XXE)
Deadline: 2026-11-24
CVE-2026-116606
Barracuda Networks Barracuda Email Security Gateway (ESG) - Circulation of authentication along the adjacent road
Target date: 2026-11-13
CVE-2026-111560
Barracuda Networks Multiple Products - Injection of operating system commands
Target date: 2026-11-13
CVE-2026-102895
GPUStack GPUStack - Incorrect authentication
Target date: 2026-11-12
CVE-2026-123158
OpenBSD OpenSSH - Actively used vulnerability
Target date: 2026-11-12
CVE-2026-116779
SignalWire FreeSwitch - Team injection
Target date: 2026-11-12
CVE-2026-123218
IBM Aspera Faspex - Incorrect authorization
Target date: 2026-11-12
CVE-2026-19868
SonicWall SonicOS SSLVPN - Actively used vulnerability
Deadline: 2026-11-20
CVE-2024-27834
Apple Multiple Products - Incorrect authentication
Target date: 2026-11-18
CVE-2026-119977
WordPress WordPress Core - Actively used vulnerability
Target date: 2026-11-06
CVE-2026-118527
Ivanti Connect Secure - Actively used vulnerability
Target date: 2026-11-13
CVE-2026-111357
Ivanti Connect Secure - Missing authentication for critical function
Deadline: 2026-11-02
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software - Actively used vulnerability
Target date: 2026-11-01
CVE-2026-97229
GitLab Community Edition and Enterprise Edition - Overflow of whole numbers
Target date: 2026-11-01
CVE-2026-41709
Broadcom VMware ESX - Actively used vulnerability
Target date: 2026-11-11
CVE-2026-46300
Linux Kernel - Actively used vulnerability
Deadline: 2026-10-31
CVE-2026-111497
Google Brotli - Actively used vulnerability
Deadline: 2026-11-10
i CISA KEV - catalogue of priority avoidable vulnerabilities The spoon in the CVE list below indicates overlap with the latest injuries.
REALLY, CVE
Top 20 latest vulnerabilities
Published CVE vulnerabilities from public sources. The list contains only those that already know the manufacturer or the product - without it the record does not say what is directly vulnerable. Updated periodically.
9.8
CVSS
Samsung Semiconductor Exynos 1480 - Cross border recording in memory
The program writes data outside the dedicated memory area, which may cause a crash or allow you to execute a foreign code.
CWE-787
7.8
CVSS
Samsung Semiconductor Exynos 1480 - High risk vulnerability
It is recommended to update quickly.
CWE-681
7.5
CVSS
Samsung Semiconductor Exynos 1280 - Cross border recording in memory
The program writes data outside the dedicated memory area, which may cause a crash or allow you to execute a foreign code.
CWE-787
8.1
CVSS
Samsung Semiconductor Exynos 2100 - Overflow of whole numbers
Numerical overflow calculations can lead to incorrect memory management.
CWE-190
9.1
CVSS
Samsung Semiconductor Exynos 1280 - Critical vulnerability
High impact - recommended update immediately.
CWE-754
9.1
CVSS
Samsung Semiconductor Exynos 1480 - Critical vulnerability
High impact - recommended update immediately.
CWE-281
7.5
CVSS
Samsung Semiconductor Exynos 1080 - High risk vulnerability
It is recommended to update quickly.
CWE-1286
8.8
CVSS
Samsung Semiconductor Exynos 2200 - High risk vulnerability
It is recommended to update quickly.
CWE-413
7.5
CVSS
Samsung Semiconductor Exynos 1080 - High risk vulnerability
It is recommended to update quickly.
CWE-1284
5.5
CVSS
Samsung Semiconductor Exynos 1280 - Medium risk vulnerability
Plan an update.
CWE-1285
9.8
CVSS
Samsung Semiconductor Exynos 1280 - Reference of the blank
The reference to the non-existent memory indication causes the program crash.
CWE-476
9.8
CVSS
Samsung Semiconductor Exynos 850 - Buffer overflow
The data is copied without size check by overwriting the adjacent memory.
CWE-120
6.5
CVSS
Samsung Semiconductor Exynos 1080 - Medium risk vulnerability
Plan an update.
CWE-754
7.5
CVSS
Samsung Semiconductor Exynos 1280 - Cross border recording in memory
The program writes data outside the dedicated memory area, which may cause a crash or allow you to execute a foreign code.
CWE-787
9.8
CVSS
Samsung Semiconductor Exynos 1080 - Critical vulnerability
High impact - recommended update immediately.
CWE-1284
9.8
CVSS
Samsung Semiconductor Exynos 850 - Uncontrolled consumption of resources
Resource consumption is not limited, which may impair access to the service.
CWE-400
7.5
CVSS
Samsung Semiconductor Exynos 850 - High risk vulnerability
It is recommended to update quickly.
CWE-835
5.3
CVSS
Samsung Semiconductor Exynos 1080 Incorrect validation of certificate
The certificate is not properly checked, which impairs the safety of the connection.
CWE-295
7.5
CVSS
Samsung Semiconductor Exynos 1080 - High risk vulnerability
It is recommended to update quickly.
CWE-1286
-
CVSS
G4KLX DStarGateway - New vulnerability
Awaiting assessment of severity.
CWE-191
i The list is updated periodically from public CVE sources.
TECH NEWS
Top 20 technology news
Most popular news from global technology, security and software stories. Updated periodically.
Source: Hacker News
- 01
- 02
- 03
- 04
- 05
- 06
- 07
- 08
- 09
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
i The list is updated periodically from public sources of technology news.