Exploited Vulnerabilities DailyVulnerabilities added to KEV in October 2026
Added9
Ransomware-linked0
Vendors8
By vendor
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-22894 | Strapi Strapi | 2026-10-08 | 1.6% | Unknown |
| CVE-2021-3199 | ONLYOFFICE Docs | 2026-10-08 | 8.2% | Unknown |
| CVE-2016-3081 | Apache Struts | 2026-10-08 | 93.3% | Unknown |
| CVE-2015-5477 | ISC BIND | 2026-10-08 | 91.2% | Unknown |
| CVE-2015-3306 | ProFTPD ProFTPD | 2026-10-08 | 96.7% | Unknown |
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | 0.5% | Unknown |
| CVE-2026-102490 | Zammad GmbH Zammad | 2026-10-02 | 0.5% | Unknown |
| CVE-2026-102489 | Zammad GmbH Zammad | 2026-10-02 | 1.2% | Unknown |
| CVE-2026-104286 | Fortinet FortiMail | 2026-10-01 | 2.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.