Weekly Vulnerability Report Archive
Every weekly vulnerability priority report, newest first. The current week’s report is a living document — it updates daily as new briefings publish, then becomes a fixed past-week report. See the live dashboard for this week’s prioritized view.
Week 3 of October 2026
One known-exploited vulnerability has been added to CISA's catalog with active exploitation evidence. Organizations should prioritize patching image p...
Week 2 of October 2026
This week's verified threats center on two critical vulnerabilities: CVE-2026-102764 affecting BeyondTrust Remote Support, which has been actively exp...
Week 1 of October 2026
This week's verified CVE coverage is limited to a single explicitly identified vulnerability affecting Grid Protection Alliance openPDC and openHistor...
Week 4 of September 2026
This week's threat landscape is dominated by active exploitation of Microsoft SharePoint vulnerabilities by the China-linked Warlock ransomware group ...
Week 3 of September 2026
Two CVEs with active exploitation corroborated across multiple sources demand immediate attention this week. CVE-2026-35273 (Oracle PeopleSoft) is bei...
Week 2 of September 2026
This week saw four verified CVEs with explicit IDs and actionable intelligence. and require immediate patching. Two additional critical flaws affectin...
Week 1 of September 2026
with GitLab CVE-2026-85706 (CVSS 10.0) requiring immediate patching due to in-the-wild probes within hours of disclosure. patching these should begin ...
Week 5 of August 2026
with CVE-2026-59346 (VMware) and. Organizations should prioritize patching VMware Workstation/Fusion, PaperCut authentication/RCE chains in education,...
Week 4 of August 2026
This week saw three confirmed critical vulnerabilities with active exploitation: CVE-2023-49105 (ownCloud) was added to CISA's Known Exploited Vulnera...
Week 3 of August 2026
This week saw multiple CVEs added to CISA's Known Exploited Vulnerabilities catalog with confirmed active exploitation, including CVE-2026-73570, CVE-...
Week 2 of August 2026
Three critical vulnerabilities require immediate attention this week. CVE-2026-55040 (Microsoft SharePoint) and CVE-2026-59310 (VMware vCenter) are co...
Week 1 of August 2026
CVE-2026-8037 in Progress Kemp LoadMaster represents a critical command injection flaw with 792+ reported exploit attempts. Organizations should prior...
Week 4 of July 2026
This week's verified vulnerability landscape is dominated by a critical Adobe Campaign Classic flaw (CVSS 10.0) requiring immediate patching. Chrome a...
Week 3 of July 2026
This week's verified CVE coverage is limited to one explicitly identified vulnerability: but lacked explicit CVE identifiers in the provided summaries...
Week 2 of July 2026
Multiple operational technology products from Rockwell Automation and related vendors were disclosed by CISA with privilege escalation and code execut...
Week 1 of July 2026
iCagenda, JoomShaper SP Page Builder, and Adobe ColdFusion are currently targeted. Organizations running these products should prioritize patching imm...
Week 5 of June 2026
This week's verified CVE activity is light, with only two explicitly identified vulnerabilities in the source material. The most urgent priority is CV...
Week 4 of June 2026
This week features three verified CVEs with explicit IDs across kernel, development tools, and enterprise systems. CVE-2026-46331 (Linux pedit) poses ...
Week 3 of June 2026
This week's verifiable vulnerability landscape is limited to two explicitly identified CVEs. and should be treated as actively exploited. CVE-2026-402...
Week 2 of June 2026
Organizations should prioritize patching these vulnerabilities immediately — several are actively exploited in the wild and confirmed in CISA's KEV ca...
Week 1 of June 2026
Three verified CVEs dominated this week's reporting: one actively exploited Linux kernel vulnerability (CVE-2022-0492) now in CISA's Known Exploited V...
Week 22 of May 2026
This week's verified threat landscape is dominated by three actively exploited vulnerabilities affecting web platforms and infrastructure. CVE-2026-48...
Week 3 of May 2026
This week presents an exceptionally high-risk threat landscape with multiple critical vulnerabilities under active exploitation across infrastructure,...
Week 2 of May 2026
This week marks a significant surge in actively exploited vulnerabilities, with three critical flaws requiring immediate patching across IT infrastruc...
Week 1 of May 2026
This week presents an exceptionally high-risk threat landscape dominated by active exploitation campaigns and critical infrastructure vulnerabilities....
Week 4 of April 2026
This week presents elevated risk from actively exploited vulnerabilities across network infrastructure, IoT devices, and enterprise software. Immediat...
Week 3 of April 2026
This week presents elevated risk across OT/ICS sectors with multiple critical RCE vulnerabilities in industrial control systems and emerging threats t...
Week 2 of April 2026
This week presents an elevated threat landscape dominated by actively exploited critical vulnerabilities in both IT and OT environments. Iranian-affil...
Week 1 of April 2026
This week presents elevated risk with five critical vulnerabilities actively exploited in the wild, including FortiClient EMS and video conferencing s...
Week 5 of March 2026
This week reflects sustained critical threats across OT/ICS and enterprise systems with multiple actively exploited vulnerabilities. F5 BIG-IP APM (CV...
Week 3 of March 2026
This week demands immediate attention. Two actively exploited vulnerabilities (VMware ESXi and FortiOS) require emergency patching. Organizations usin...