Rising exploitation

Largest rise in EPSS9 Oct 2026 to 8 Nov 2026, in percentage points

1. CVE-2026-109618

   RCE via OOM corruption

   EPSS 0.00% → 100.0% · PHP Group · PHP

   +100.0ExploitedCritical9.2
2. CVE-2026-109619

   RCE via stale global state

   EPSS 0.00% → 100.0% · PHP Group · PHP

   +100.0ExploitedCritical9.2
3. CVE-2026-21589

   This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…

   EPSS 1.8% → 99.7% · Atlassian · Bamboo Data Center

   +97.9ExploitedCritical9.3
4. CVE-2026-75650

   Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

   EPSS 3.9% → 99.4% · Adobe · Adobe Commerce

   +95.4ExploitedCritical10.0
5. CVE-2026-31431

   crypto: algif_aead - Revert to operating out-of-place

   EPSS 3.4% → 98.1% · Linux · Linux

   +94.7ExploitedHigh7.8
6. CVE-2026-34486

   Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

   EPSS 6.6% → 98.5% · Apache Software Foundation · Apache Tomcat

   +91.9ExploitedHigh7.5
7. CVE-2026-43500

   rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

   EPSS 2.3% → 94.1% · Linux · Linux

   +91.9High7.8
8. CVE-2026-43284

   xfrm: esp: avoid in-place decrypt on shared skb frags

   EPSS 2.5% → 94.2% · Linux · Linux

   +91.7High8.8
9. CVE-2026-104935

   Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact…

   EPSS 0.00% → 88.9% · Ivanti · Connect Secure

   +88.9ExploitedHigh8.6
10. CVE-2026-3055

    Insufficient input validation leading to memory overread

    EPSS 4.0% → 91.5% · NetScaler · ADC

    +87.4ExploitedCritical9.3
11. CVE-2026-35273

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are…

    EPSS 9.4% → 96.7% · Oracle Corporation · PeopleSoft Enterprise PeopleTools

    +87.2ExploitedCritical9.8
12. CVE-2026-35616

    A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or…

    EPSS 9.1% → 94.0% · Fortinet · FortiClientEMS

    +84.9ExploitedCritical9.1
13. CVE-2026-105133

    Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

    EPSS 0.38% → 84.5% · Ahsay · AhsayCBS

    +84.1ExploitedMedium6.9
14. CVE-2026-42208

    LiteLLM: SQL injection in Proxy API key verification

    EPSS 5.8% → 89.4% · BerriAI · litellm

    +83.6ExploitedCritical9.3
15. CVE-2026-34197

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

    EPSS 15.5% → 98.3% · Apache Software Foundation · Apache ActiveMQ Broker

    +82.8ExploitedHigh8.8
16. CVE-2026-111497

    Out-of-Bounds Write in Google Brotli Decoder

    EPSS 0.00% → 82.6% · Google · Brotli

    +82.6ExploitedCritical9.2
17. CVE-2026-88771

    A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

    EPSS 1.1% → 81.9% · Citrix NetScaler · ADC

    +80.8ExploitedCritical9.5
18. CVE-2026-105134

    Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

    EPSS 1.8% → 81.8% · Ahsay · AhsayCBS

    +79.9ExploitedCritical10.0
19. CVE-2026-72898

    Metabase SQL injection via password reset endpoint

    EPSS 19.0% → 98.2% · Metabase · Metabase

    +79.2ExploitedCritical10.0
20. CVE-2026-102764

    Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

    EPSS 0.00% → 78.0% · BeyondTrust · Remote Support

    +78.0ExploitedCritical9.3
21. CVE-2026-45659

    Microsoft SharePoint Remote Code Execution Vulnerability

    EPSS 2.7% → 80.2% · Microsoft · Microsoft SharePoint Enterprise Server 2016

    +77.5ExploitedHigh8.8
22. CVE-2026-41089

    Windows Netlogon Remote Code Execution Vulnerability

    EPSS 0.97% → 78.3% · Microsoft · Windows Server 2012

    +77.4Critical9.8
23. CVE-2026-33824

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    EPSS 1.6% → 77.1% · Microsoft · Windows 10 Version 1607

    +75.4ExploitedCritical9.8
24. CVE-2026-88772

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    EPSS 1.3% → 76.6% · Citrix NetScaler · ADC

    +75.3ExploitedCritical9.5
25. CVE-2026-48558

    SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification

    EPSS 5.7% → 80.3% · SimpleHelp · SimpleHelp

    +74.5ExploitedCritical9.5
26. CVE-2026-34908

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to…

    EPSS 15.2% → 88.9% · Ubiquiti Inc · UniFi OS Server

    +73.7ExploitedCritical10.0
27. CVE-2026-9082

    Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    EPSS 15.7% → 89.4% · Drupal · Drupal core

    +73.7ExploitedCritical9.8
28. CVE-2026-110447

    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September…

    EPSS 0.00% → 73.3% · Collabora · Collabora Online - Built-in CODE Server

    +73.3ExploitedCritical9.2
29. CVE-2026-93616

    Directory Traversal and File upload allows execution of arbitrary script on the Management Server

    EPSS 19.7% → 91.6% · checkpoint · Quantum Security Management

    +72.0ExploitedCritical9.8
30. CVE-2026-33017

    Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

    EPSS 24.8% → 96.4% · langflow-ai · langflow

    +71.6ExploitedCritical9.3
31. CVE-2026-4020

    Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API

    EPSS 2.2% → 73.8% · RocketGenius · Gravity SMTP

    +71.6High7.5
32. CVE-2026-42897

    Microsoft Exchange Server Spoofing Vulnerability

    EPSS 0.52% → 70.7% · Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23

    +70.1ExploitedHigh8.1
33. CVE-2026-48907

    Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

    EPSS 16.2% → 85.4% · joomlacontenteditor.net · Joomla Content Editor (JCE) extension for Joomla

    +69.2ExploitedCritical10.0
34. CVE-2026-34909

    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system…

    EPSS 1.8% → 69.2% · Ubiquiti Inc · UniFi OS Server

    +67.4ExploitedCritical10.0
35. CVE-2026-26980

    Ghost has a SQL Injection in its Content API

    EPSS 5.1% → 71.1% · TryGhost · Ghost

    +66.0Critical9.4
36. CVE-2026-32202

    Windows Shell Spoofing Vulnerability

    EPSS 4.9% → 70.9% · Microsoft · Windows 10 Version 1607

    +66.0ExploitedMedium4.3
37. CVE-2026-97229

    Integer Overflow or Wraparound in GitLab

    EPSS 0.00% → 65.2% · GitLab · GitLab

    +65.2ExploitedCritical10.0
38. CVE-2026-42945

    NGINX ngx_http_rewrite_module vulnerability

    EPSS 3.4% → 68.0% · F5 · NGINX Plus

    +64.7Critical9.2
39. CVE-2026-48710

    Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

    EPSS 7.1% → 70.3% · Kludex · starlette

    +63.2ExploitedMedium6.5
40. CVE-2026-39987

    marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

    EPSS 37.9% → 99.7% · marimo-team · marimo

    +61.9ExploitedCritical9.3
41. CVE-2026-45498

    Microsoft Defender Denial of Service Vulnerability

    EPSS 1.3% → 63.1% · Microsoft · Microsoft Defender Antimalware Platform

    +61.8ExploitedMedium4.0
42. CVE-2026-76460

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    EPSS 14.0% → 75.6% · Cisco · Cisco Identity Services Engine Software

    +61.6ExploitedCritical10.0
43. CVE-2026-59310

    vCenter directory-traversal vulnerability

    EPSS 2.6% → 61.7% · VMware · Cloud Foundation

    +59.1ExploitedCritical9.8
44. CVE-2026-33634

    Trivy ecosystem supply chain briefly compromised

    EPSS 1.7% → 59.7% · aquasecurity · setup-trivy

    +58.0ExploitedCritical9.4
45. CVE-2026-87902

    An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme…

    EPSS 40.0% → 95.8% · WordPress · WordPress

    +55.8ExploitedHigh8.1
46. CVE-2026-49160

    HTTP.sys Denial of Service Vulnerability

    EPSS 1.2% → 56.6% · Microsoft · Windows 10 Version 1607

    +55.4High7.5
47. CVE-2026-2699

    EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    EPSS 3.2% → 58.4% · Progress · ShareFile Storage Zones Controller

    +55.2Critical9.8
48. CVE-2026-2701

    RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)

    EPSS 3.4% → 54.5% · Progress · ShareFile Storage Zones Controller

    +51.1Critical9.1
49. CVE-2026-53435

    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or…

    EPSS 2.2% → 51.2% · Jenkins Project · Jenkins

    +49.0High8.8
50. CVE-2026-102489

    Undisclosed RCE in Zammad v6.3 and higher

    EPSS 1.3% → 49.9% · Zammad GmbH · Zammad

    +48.7ExploitedHigh8.7