OFFLINE
Awaiting data
C

Security

CISA KEV Security Advisories

Advisory feed healthy

Source: healthy

Track recent CISA KEV security advisories, severity, exploit risk, affected products, and remediation information. DTMonitor checks the official source and clearly marks stale or unavailable data instead of assuming the service is healthy.

Active incidents

0

Incidents in 30 days

0

Last verified

Nov 10, 2026, 5:35 AM UTC

Full history
Major

CVE-2026-102895: GPUStack Improper Authentication Vulnerability

CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating

→
Major

CVE-2026-116779: SignalWire FreeSwitch Code Injection Vulnerability

CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating

→
Major

CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability

CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating

→
Major

CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

CISA KEV · Nov 9, 2026, 12:00 AM UTC · investigating

→
Minor

CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

CISA KEV · Nov 6, 2026, 12:00 AM UTC · investigating

→
Minor

CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability

CISA KEV · Nov 4, 2026, 12:00 AM UTC · investigating

→
Critical

CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

CISA KEV · Nov 3, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

CISA KEV · Oct 30, 2026, 12:00 AM UTC · active

→
Major

CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

CISA KEV · Oct 30, 2026, 12:00 AM UTC · investigating

→
Critical

CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

CISA KEV · Oct 29, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

CISA KEV · Oct 29, 2026, 12:00 AM UTC · active

→
Major

CVE-2026-41709: Broadcom VMWare ESX Insufficient Logging Vulnerability

CISA KEV · Oct 28, 2026, 12:00 AM UTC · investigating

→
Critical

CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability

CISA KEV · Oct 28, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability

CISA KEV · Oct 27, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

CISA KEV · Oct 27, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-109618: PHP Memory Corruption Vulnerability

CISA KEV · Oct 26, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-109619: PHP Stale Internal Request-State Vulnerability

CISA KEV · Oct 26, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

CISA KEV · Oct 23, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability

CISA KEV · Oct 23, 2026, 12:00 AM UTC · active

→
Critical

CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

CISA KEV · Oct 20, 2026, 12:00 AM UTC · active

→

Status information is attributed to the provider's official status page or feed. Source freshness is shown separately because an unreachable feed is not evidence that a service is operational.