Threat Intelligence Report — October 27, 2026 | 4 New KEVs · 221 Victims

Report Date: 2026-10-27

New KEVs: 4  ▲ +4 vs last weekRansomware Victims: 221  ▼ -39 vs last week

4 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Php Group products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 221 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.

Read more

CVE-2026-109619 — PHP Group PHP: Use-After-Free | CVSS 9.2 CRITICAL

CRITICAL

CVSS 9.2 CRITICAL  ·  EPSS 100%  ·  PHP Group PHP

Read more

CVE-2026-109618 — PHP Group PHP: Use-After-Free | CVSS 9.2 CRITICAL

CRITICAL

CVSS 9.2 CRITICAL  ·  EPSS 100%  ·  PHP Group PHP

Read more

Threat Intelligence Report — October 25, 2026 | 7 New KEVs · 221 Victims

Report Date: 2026-10-25

New KEVs: 7  — unchanged vs last weekRansomware Victims: 221  ▼ -83 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Plex products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 221 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.

Read more

Threat Intelligence Report — October 24, 2026 | 7 New KEVs · 224 Victims

Report Date: 2026-10-24

New KEVs: 7  — unchanged vs last weekRansomware Victims: 224  ▼ -75 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Plex products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 224 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.

Read more

Threat Intelligence Report — October 23, 2026 | 7 New KEVs · 209 Victims

Report Date: 2026-10-23

New KEVs: 7  — unchanged vs last weekRansomware Victims: 209  ▼ -80 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Plex products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 209 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.

Read more

CVE-2026-110447 — Collabora Collabora Online – Built-in CODE Server: OS Command Injection | CVSS 9.2 CRITICAL

CRITICAL

CVSS 9.2 CRITICAL  ·  EPSS 1%  ·  Collabora Collabora Online – Built-in CODE Server

Read more

CVE-2026-114625 — Arista VeloCloud Orchestrator: SQL Injection | CVSS 9.4 CRITICAL

CRITICAL

CVSS 9.4 CRITICAL  ·  EPSS 1%  ·  Arista VeloCloud Orchestrator

Read more

Threat Intelligence Report — October 22, 2026 | 7 New KEVs · 243 Victims

Report Date: 2026-10-22

New KEVs: 7  — unchanged vs last weekRansomware Victims: 243  ▼ -40 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Plex products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 243 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.

Read more

Threat Intelligence Report — October 21, 2026 | 7 New KEVs · 243 Victims

Report Date: 2026-10-21

New KEVs: 7  ▲ +6 vs last weekRansomware Victims: 243  ▼ -24 vs last week

7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Plex products show the strongest concentration of risk signals this week. Ransomware activity is moderate with 243 new victims posted to leak sites over the last 7 days, with N0N posting the most victims.

Read more