Skip to content
Português
Schematic map of the digital-security institutional landscapeSimplified illustration of the continents, marking with a dot the approximate location of fourteen digital-security bodies across six continents. The same elements, with the same function, are available in the list beside it.

Actively exploited vulnerabilities

CISA KEV and EUVD/ENISA catalogs — the ten most recent; those matching a watched vendor are marked in red.

Last collected: 10/20/26, 9:01 PM

  • CVE: CVE-2025-61624[watched vendor]CISA KEV

    Vendor / product: Fortinet · Multiple Products

    FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 10/19/26

  • CVE: CVE-2026-96652CISA KEV

    Vendor / product: Plex · Media Server

    Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 11/3/26

  • CVE: CVE-2026-96654CISA KEV

    Vendor / product: Plex · Media Server

    Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 10/23/26

  • CVE: CVE-2026-96655CISA KEV

    Vendor / product: Plex · Media Server

    Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 11/3/26

  • CVE: CVE-2026-96656CISA KEV

    Vendor / product: Plex · Media Server

    Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 10/23/26

  • CVE: CVE-2026-106931CISA KEV

    Vendor / product: EG Secure Solutions · SiteGuard Server Edition

    EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 10/23/26

  • CVE: CVE-2026-110936CISA KEV

    Vendor / product: Siemens · Software Center

    Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 11/3/26

  • CVE: CVE-2026-102764CISA KEV

    Vendor / product: BeyondTrust · Remote Support

    BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.

    View source ↗

    Severity: [Confirmed active exploitation]

    Due: 10/19/26

  • CVE: CVE-2026-102764EUVD / ENISA

    Vendor / product: BeyondTrust

    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

    View source ↗

    Severity: [Critical · CVSS 9.3]

    Due: no due date

  • CVE: CVE-2026-110936EUVD / ENISA

    Vendor / product: Siemens

    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

    View source ↗

    Severity: [High · CVSS 8.4]

    Due: no due date

View the full archive (1847 vulnerabilities) →

Radar

What's happening in tech — Angola, Portugal, Africa and the world, with a focus on cybersecurity. Curated by us, written by whoever bylines each article.

Filter news by category ↓

Sources monitored
17
Vulnerabilities tracked
1,847
Items collected
0

Institutional landscape

Fourteen bodies, six continents. Not all of them have a queryable catalogue or feed — in Africa, we did not find one: not at the regional coordination body (AfricaCERT), not in the continental framework (Malabo Convention), not at Angola's own institutions (APD, INACOM). That is the gap TAC helps close in the Angolan market.

Has a data source — click to filter the list

No data source identified — informational

Curated news

Showing only news from NCSC. See both sources

No recent news from NCSC. The other sources are still in the full list.