CVEs

Vulnerability Watch ›

• CVE-2026-1340

  criticalVulnerability of Interest

  Two Ivanti Endpoint Manager Mobile zero-day flaws were exploited in the wild in limited attacks. Apply the available patches immediately.

• CVE-2026-1281

  criticalVulnerability of Interest

  Two Ivanti Endpoint Manager Mobile zero-day flaws were exploited in the wild in limited attacks. Apply the available patches immediately.

• CVE-2025-40551

  criticalVulnerability of Interest

  This critical vulnerability affecting SolarWinds Web Help Desk has been reportedly exploited in the wild and should be remediated as soon as possible.

• CVE-2026-24858

  criticalVulnerability of Interest

  Fortinet has observed in the wild exploitation of this vulnerability. Customers must upgrade to the latest versions in order to use FortiCloud SSO authentication

• CVE-2026-21509

  highVulnerability of Interest

  Microsoft released this out of band update to address a security feature bypass vulnerability that has been exploited in the wild. Immediate patching is recommended

• CVE-2024-37079

  criticalVulnerability of Interest

  Exploitation has been reported for this VMware vCenter Server vulnerability. Patches are available and should be applied as soon as possible.

• CVE-2025-40554

  criticalVulnerability Being Monitored

  This critical vulnerability affecting SolarWinds Web Help Desk should be remediated as soon as possible. Solar Winds products have been highly targeted in the past

• CVE-2025-40553

  criticalVulnerability Being Monitored

  This critical vulnerability affecting SolarWinds Web Help Desk should be remediated as soon as possible. Solar Winds products have been highly targeted in the past

• CVE-2025-40552

  criticalVulnerability Being Monitored

  This critical vulnerability affecting SolarWinds Web Help Desk should be remediated as soon as possible. Solar Winds products have been highly targeted in the past

• CVE-2026-22709

  criticalVulnerability Being Monitored

  This critical sandbox escape vulnerability affects the Node.js library and can be abused to execute commands. Immediate patching is recommended.