Week of October 6, 2026
This is an archived issue. See the latest digest or all issues.
Exploitation probability spikes overnight. Public exploits land. CVEs cross into confirmed in-the-wild use. That movement, the change, is what ESIP scores and surfaces.
Silence is not clearance: a CVE that didn't move isn't a safe one, just one nothing has happened to that week. When something does move, that change is the exposure signal.
An out-of-bounds write fixed by improved bounds checking, now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
A session-authentication bypass through URL encoding in Cisco Catalyst, now government-confirmed as exploited and corroborated by ENISA EUVD. Confirmed at critical severity. Act now.
A privilege-management flaw in Zammad, now confirmed exploited by its addition to CISA KEV. Confirmed at critical severity. Act now.
A SQL injection in Cisco AsyncOS email parsing, confirmed exploited and still escalating at high velocity, twenty-two days on. Treat as immediate.
Ollama for Windows fetches updates without an integrity check, now weaponized with a Metasploit module. Active and escalating. Review against your inventory.
A path-traversal RCE in the Ollama for Windows update mechanism, paired with CVE-2026-42248 in one public exploit. Active and escalating. Review against your inventory.
A resource-lifetime flaw in the Linux kernel networking stack, now weaponized with a Metasploit local exploit. Active and escalating. Review against your inventory.
Browse every issue, or read the latest.