The vulnerabilities attackers are using in the wild today — CISA's Known-Exploited catalog, freshest first, each ranked by its EPSS exploit-probability. Served live by Datakoot security-intel. Every row is checkable against CISA; nothing here is invented.
| CVE | Product | What it is | EPSS | KEV added |
|---|---|---|---|---|
| CVE-2026-114713 | UnrealIRCd UnrealIRCd |
UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority. | 0.3% | 2026-11-13 |
| CVE-2026-123039 | Multiple Products Check Point |
Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local s | 1.3% | 2026-11-13 |
| CVE-2026-124194 | Office Microsoft |
Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network. | 1.6% | 2026-11-10 |
| CVE-2026-111793 | Webtop Media Transcoder Openwave Messaging Limited |
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience. | 0.6% | 2026-11-10 |
| CVE-2026-20320 | BroadWorks Cisco |
Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. | 1.0% | 2026-11-10 |
| CVE-2026-111560 | Multiple Products Barracuda Networks |
Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an aut | 9.1% | 2026-11-10 |
| CVE-2026-116606 | Barracuda Email Security Gateway (ESG) Barracuda Networks |
Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification | 10.9% | 2026-11-10 |
| CVE-2026-125350 | Chromium Google |
Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Go | 1.0% | 2026-11-10 |
| CVE-2026-102895 | GPUStack GPUStack |
GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/fro | 0.5% | 2026-11-09 |
| CVE-2026-123158 | OpenSSH OpenBSD |
OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass. | 18.9% | 2026-11-09 |
| CVE-2026-116779 | FreeSwitch SignalWire |
SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution. | 2.5% | 2026-11-09 |
| CVE-2026-123218 | Aspera Faspex IBM |
IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations. | 0.5% | 2026-11-09 |
| CVE-2026-19868 | SonicOS SSLVPN SonicWall |
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA). | 0.5% | 2026-11-06 |
| CVE-2024-27834 | Multiple Products Apple |
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication. | 1.5% | 2026-11-04 |
| CVE-2026-119977 | WordPress Core WordPress |
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades. | 1.2% | 2026-11-03 |
This page is just one call to a keyless MCP server. Point any MCP client (Claude, Cursor, …) at it:
claude mcp add --transport http security-intel https://security.datakoot.com/mcp