Vulnerabilities
Which software flaws matter right now — 408,888 CVEs tracked daily, scored by exploitation probability, cross-checked against the 1,746 CISA has confirmed exploited.
Last updated: 16 October 2026 10:19 UTC
Act
Today's briefthe day's signal decomposed into to-dos — filter, check off, exportToday's signalnew KEV entries, biggest EPSS movers, fresh criticals — rankedDaily CVE trackerevery recent CVE plotted by exploitation probabilityRisk scoring explainedhow the 0–100 composite score worksExplore
Weakness patterns (CWE)748 weakness classes, blind spots flaggedAI-software vulnerabilitiesthe AI/ML attack surface, tracked dailyEU vs NVD severitywhere European CSIRTs disagree with NVDEUVD criticalswhat ENISA rates critical right nowUnderstand
Is the problem growing?publication volume, severity distribution, and re-scored CVEs over timeLLMs discovering vulnerabilitieshow AI models are changing disclosureMythos Hype Indexmeasuring the AI-discovery signal against the noiseHow will attackers react?the offense-side analysis of LLM discoveryRecent news — Vulnerabilities
- KEV: CVE-2026-104935 — Ivanti Connect Secure (Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability)
- New critical CVE: CVE-2026-76519 — A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated…
- October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
- CSA Singapore alert: 16 October 2026 16 October 2026 Active Exploitation of Vulnerability in Palo Alto Networks Products Attackers are exploiting a high-severity vulnerability in Palo Alto Networks PAN-OS to execute arbitrary code with root privileges. Patch immediately.
- CERT-In Warns Google Chrome Users of Critical Flaws That Could Allow Cyberattacks
- KEV: CVE-2026-7273 — Zyxel GS1900 Series Switches (Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability)