NVD · CISA KEV · EPSS — cross-referenced every two hours
Of 60.368 vulnerabilities, 809 are actually being exploited.
A CVSS score says how bad a flaw is in theory. This tracker crosses NVD data with the CISA catalogue of exploited vulnerabilities and with EPSS probabilities, and puts first the ones somebody is using right now.
| Identifier | Severity | Product and flaw | EPSS | In KEV since |
|---|---|---|---|---|
| CVE-2026-109619 | HIGH 8.1 | paloaltonetworks pan-os PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse | 100.0% | |
| CVE-2026-109618 | CRIT 9.8 | paloaltonetworks pan-os PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su | 100.0% | |
| CVE-2025-53770 | CRIT 9.8 | ransomware microsoft sharepoint_server Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a co | 100.0% | |
| CVE-2024-3400 | CRIT 10.0 | ransomware paloaltonetworks pan-os A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbit | 100.0% | |
| CVE-2023-4966 | CRIT 9.4 | ransomware citrix netscaler_application_delivery_controller Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. | 100.0% |
Intune from Zero
From an empty tenant to a Windows 11 device that provisions itself, encrypts itself and can be reached remotely. Ten chapters, with the errors included.
Hybrid Windows Server
The installer shows no disks because Windows has no VirtIO driver. Machine type, firmware, and the snapshot to take before anything else happens.
NordVPN over WireGuard: on GL.iNet the token is enough
On a GL.iNet the token is enough and the router does the rest. Everywhere else the private key must be pulled from the account API: how, and from which machine.
LinuxSelf-hosting MeshCentral: the complete guide
Install MeshCentral on a Linux VPS: dedicated user, systemd service, firewall, 2FA and your first agent. Every command explained, field-tested.
Microsoft 365Who decides a hybrid mailbox's primary address
Three components claim the same field: the email address policy, the command you are running, and Entra. They win in that order, and none of them says so.