Everything the registers published, read the hour it lands.

Improper Authentication Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-102895

OpenSSH Unexpected Status Code or Return Value Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-123158

FreeSwitch Code Injection Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-116779

SonicOS SSLVPN Use of Single-factor Authentication Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-19868

Multiple Products Improper Authentication Vulnerability added to the US list of exploited vulnerabilities

CVE-2024-27834

WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-119977

Connect Secure Missing Authentication for Critical Function Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-111357

Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-118527

Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-76418

Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-97229

Kernel Missing Initialization of a Variable Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-46300

VMWare ESX Insufficient Logging Vulnerability added to the US list of exploited vulnerabilities

CVE-2026-41709