← Back to feed TrendingZero-days

🚫 Patch This Week

Vulnerabilities requiring immediate action — actively exploited in the wild or with public exploit code available. Updated every 4 hours.

How this list is built Tier 1 — Patch now: On CISA Known Exploited Vulnerabilities (KEV) list — confirmed in-the-wild exploitation.
Tier 2 — Patch soon: Public proof-of-concept exploit exists with CVSS ≥7.0 or EPSS ≥70th percentile.

⬤ Tier 1 — Patch immediately (15 CVEs) CISA KEV confirmed

CVE / IDTitleSeverityCVSSEPSSWhy urgentSourceDate
CVE-2026-97229Integer Overflow or Wraparound in GitLabCRITICAL10.098%KEV PoC EPSS 98%ileMicrosoft2026-10-13
CVE-2026-102764BeyondTrust Remote Support: unvalidated internal messages allow file operations on the applianceCRITICAL9.397%KEV PoC EPSS 97%ileFeatured2026-10-15
CVE-2026-104286FortiMail zero-day: unauthenticated arbitrary file write via path traversal (no patch yet)CRITICAL9.892%KEV PoC EPSS 92%ileFeatured2026-10-01
CVE-2026-76519Cisco Secure Email Gateway: unauthenticated arbitrary file write via crafted email attachment (AMP)CRITICAL9.882%KEV PoC EPSS 82%ileFeatured2026-10-14
CVE-2026-109618PHP Memory Corruption VulnerabilityHIGH—100%KEV PoC EPSS 100%ileCISA-KEV2026-10-26
CVE-2026-109619PHP Stale Internal Request-State VulnerabilityHIGH—100%KEV PoC EPSS 100%ileCISA-KEV2026-10-26
CVE-2026-21589Atlassian Data Center products: unauthenticated access to files in the web rootHIGH—100%KEV PoC EPSS 100%ileFeatured2026-10-15
CVE-2026-111497Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoderHIGH8.1100%KEV PoC EPSS 100%ileMicrosoft2026-10-13
CVE-2026-104935Ivanti Connect Secure authentication bypass — exploited zero-day chained to root RCEHIGH—100%KEV PoC EPSS 100%ileFeatured2026-10-13
CVE-2026-88771Citrix NetScaler: two more exploited flaws (CVE-2026-88771 + CVE-2026-88772)HIGH—100%KEV PoC EPSS 100%ileFeatured2026-09-27
CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityHIGH—99%KEV PoC EPSS 99%ileCISA-KEV2026-10-27
CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescingHIGH7.897%KEV PoC EPSS 97%ileMicrosoft2026-05-12
CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilityHIGH8.896%KEV EPSS 96%ileMicrosoft2026-10-13
CVE-2026-0322Palo Alto PAN-OS management interface RCE as rootHIGH8.678%KEV EPSS 78%ileFeatured2026-10-14
CVE-2026-76418A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareHIGH8.657%KEV EPSS 57%ileNVD2026-10-28

⬤ Tier 2 — Patch soon (66 CVEs) public exploit code

CVE / IDTitleSeverityCVSSEPSSWhy urgentSourceDate
CVE-2024-4577Argument Injection in PHP-CGICRITICAL9.8100%PoC EPSS 100%ileMicrosoft2024-06-11
CVE-2025-32433Erlang/OTP SSH Vulnerable to Pre-Authentication RCECRITICAL10.0100%PoC EPSS 100%ileMicrosoft2025-04-08
CVE-2026-41089Windows Netlogon Remote Code Execution VulnerabilityCRITICAL9.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityCRITICAL9.199%PoC EPSS 99%ileMicrosoft2026-07-14
CVE-2025-50165Windows Graphics Component Remote Code Execution VulnerabilityCRITICAL9.896%PoC EPSS 96%ileMicrosoft2025-08-12
CVE-2025-29972Azure Storage Resource Provider Spoofing VulnerabilityCRITICAL9.989%PoC EPSS 89%ileMicrosoft2025-05-13
CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.888%PoC EPSS 88%ileMicrosoft2026-07-14
CVE-2026-41096Windows DNS Client Remote Code Execution VulnerabilityCRITICAL9.886%PoC EPSS 86%ileMicrosoft2026-05-12
CVE-2025-32434PyTorch: `torch.load` with `weights_only=True` leads to remote code executionCRITICAL9.884%PoC EPSS 84%ileMicrosoft2025-04-08
CVE-2026-93680IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authCRITICAL9.882%PoC EPSS 82%ileNVD2026-10-29
CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb fragsHIGH7.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentHIGH7.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2026-45659Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.8100%PoC EPSS 100%ileMicrosoft2026-05-12
CVE-2023-50868MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPUHIGH7.5100%PoC EPSS 100%ileMicrosoft2024-06-11
CVE-2026-42897Microsoft Exchange Server Spoofing VulnerabilityHIGH8.199%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2024-30088Windows Kernel Elevation of Privilege VulnerabilityHIGH7.099%PoC EPSS 99%ileMicrosoft2024-06-11
CVE-2026-49160HTTP.sys Denial of Service VulnerabilityHIGH7.599%PoC EPSS 99%ileMicrosoft2026-06-09
CVE-2026-23918Apache HTTP Server: http2: double free and possible RCE on early resetHIGH8.899%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2026-49975Apache HTTP Server: mod_http2 denial of serviceHIGH7.598%PoC EPSS 98%ileMicrosoft2026-06-09
CVE-2025-53772Web Deploy Remote Code Execution VulnerabilityHIGH8.898%PoC EPSS 98%ileMicrosoft2025-08-12
CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityHIGH7.598%PoC EPSS 98%ileMicrosoft2025-05-13
CVE-2024-35250Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.898%PoC EPSS 98%ileMicrosoft2024-06-11
CVE-2025-29824Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.897%PoC EPSS 97%ileMicrosoft2025-04-08
CVE-2025-40775DNS message with invalid TSIG causes an assertion failureHIGH7.597%PoC EPSS 97%ileMicrosoft2025-05-13
CVE-2024-30085Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.897%PoC EPSS 97%ileMicrosoft2024-06-11
CVE-2025-27480Windows Remote Desktop Services Remote Code Execution VulnerabilityHIGH8.196%PoC EPSS 96%ileMicrosoft2025-04-08
CVE-2026-9256NGINX ngx_http_rewrite_module vulnerabilityHIGH8.196%PoC EPSS 96%ileMicrosoft2026-05-12
CVE-2026-50656Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.896%PoC EPSS 96%ileMicrosoft2026-06-09
CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.095%PoC EPSS 95%ileMicrosoft2026-08-11
CVE-2026-65660Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.895%PoC EPSS 95%ileMicrosoft2026-08-11
CVE-2026-41091Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895%PoC EPSS 95%ileMicrosoft2026-05-12
CVE-2025-53786Microsoft Exchange Server Hybrid Deployment Elevation of Privilege VulnerabilityHIGH8.094%PoC EPSS 94%ileMicrosoft2025-08-12
CVE-2025-21204Windows Process Activation Elevation of Privilege VulnerabilityHIGH7.894%PoC EPSS 94%ileMicrosoft2025-04-08
CVE-2026-42980NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.894%PoC EPSS 94%ileMicrosoft2026-06-09
CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityHIGH8.194%PoC EPSS 94%ileMicrosoft2026-06-09
CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityHIGH8.194%PoC EPSS 94%ileMicrosoft2026-07-14
CVE-2024-30084Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.093%PoC EPSS 93%ileMicrosoft2024-06-11
CVE-2026-40369Windows Kernel Elevation of Privilege VulnerabilityHIGH7.892%PoC EPSS 92%ileMicrosoft2026-05-12
CVE-2025-60710Host Process for Windows Tasks Elevation of Privilege VulnerabilityHIGH7.892%PoC EPSS 92%ileMicrosoft2025-11-11
CVE-2025-62215Windows Kernel Elevation of Privilege VulnerabilityHIGH7.091%PoC EPSS 91%ileMicrosoft2025-11-11
CVE-2026-46242eventpoll: fix ep_remove struct eventpoll / struct file UAFHIGH7.891%PoC EPSS 91%ileMicrosoft2026-05-12
CVE-2026-45447Heap Use-After-Free in the PKCS7_verify() FunctionHIGH8.890%PoC EPSS 90%ileMicrosoft2026-06-09
CVE-2026-55200libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cHIGH8.190%PoC EPSS 90%ileMicrosoft2026-06-09
CVE-2025-27740Active Directory Certificate Services Elevation of Privilege VulnerabilityHIGH8.889%PoC EPSS 89%ileMicrosoft2025-04-08
CVE-2026-96940Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH8.886%PoC EPSS 86%ileMicrosoft2026-10-13
CVE-2025-53779Windows Kerberos Elevation of Privilege VulnerabilityHIGH7.286%PoC EPSS 86%ileMicrosoft2025-08-12
CVE-2024-36971net: fix __dst_negative_advice() raceHIGH7.886%PoC EPSS 86%ileMicrosoft2024-06-11
CVE-2026-5172CVE-2026-5172HIGH7.386%PoC EPSS 86%ileMicrosoft2026-05-12
CVE-2025-29810Active Directory Domain Services Elevation of Privilege VulnerabilityHIGH7.586%PoC EPSS 86%ileMicrosoft2025-04-08
CVE-2025-62221Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.885%PoC EPSS 85%ileMicrosoft2025-12-09
CVE-2025-62454Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.883%PoC EPSS 83%ileMicrosoft2025-12-09
CVE-2025-54100PowerShell Remote Code Execution VulnerabilityHIGH7.883%PoC EPSS 83%ileMicrosoft2025-12-09
CVE-2026-53359Januscape: KVM/x86 guest-to-host escape (Intel + AMD) — kvmCTF 0-dayHIGH7.072%PoC EPSS 72%ileFeatured2026-07-06
CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityMEDIUM4.099%PoC EPSS 99%ileMicrosoft2026-05-12
CVE-2025-50154Microsoft Windows File Explorer Spoofing VulnerabilityMEDIUM6.598%PoC EPSS 98%ileMicrosoft2025-08-12
CVE-2026-50507Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.892%PoC EPSS 92%ileMicrosoft2026-06-09
CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logicMEDIUM5.591%PoC EPSS 91%ileMicrosoft2026-05-12
CVE-2025-14174Chromium: CVE-2025-14174 Out of bounds memory access in ANGLEUNKNOWN—99%PoC EPSS 99%ileMicrosoft2025-12-09
CVE-2025-9478Chromium: CVE-2025-9478 Use after free in ANGLEUNKNOWN—94%PoC EPSS 94%ileMicrosoft2025-08-12
CVE-2025-4664Chromium: CVE-2025-4664 Insufficient policy enforcement in LoaderUNKNOWN—93%PoC EPSS 93%ileMicrosoft2025-05-13
CVE-2026-25243redis-server RESTORE invalid memory access may allow remote code executionUNKNOWN—91%PoC EPSS 91%ileMicrosoft2026-05-12
CVE-2026-87491Chromium CVE-2026-87491: Out of bounds write in V8UNKNOWN—89%PoC EPSS 89%ileMicrosoft2026-09-08
CVE-2026-23631redis-server Lua use-after-free may allow remote code executionUNKNOWN—88%PoC EPSS 88%ileMicrosoft2026-05-12
CVE-2025-14765Chromium: CVE-2025-14765 Out of bounds read and write in V8UNKNOWN—87%PoC EPSS 87%ileMicrosoft2025-12-09
CVE-2026-23479redis-server use-after-free in unblock client flow may allow remote code executionUNKNOWN—85%PoC EPSS 85%ileMicrosoft2026-05-12

Updated 2026-11-02. Source: NVD, CISA KEV, EPSS (FIRST.org). JSON API available for automation.