Daily exploit watch for IT, security and cloud teams
Know what to patch before attackers do
The vulnerabilities attackers are using right now, explained in plain English with clear fixes. Daily updates, plus a Monday summary of the week.
Daily exploit watch
Actively exploited and CVSS 9.0+ vulnerabilities in widely used software and cloud services.
Full analysis
Every issue gets its own page: how the attack works, who is affected, and how to check and fix it.
Monday summary
Last week's priorities and a practical patch checklist, in one short read.
Latest exploited vulnerabilities
All vulnerabilities →
Critical
CVE-2026-115806: Prime Mover WordPress Plugin – Unauthenticated Remote Code Execution via Object Injection
The Prime Mover backup and migration plugin for WordPress contains an unsafe deserialization flaw in its search-and-replace routine that accepts untrusted, base64-encoded serialized objects from comment fields. An attacker can inject a malicious object that exploits a Property-Oriented Pro
26 Oct 2026 Read more →
Critical
CVE-2026-109618: PHP Use-After-Free in Memory Allocation Leads to Remote Code Execution
Multiple PHP versions contain a use-after-free vulnerability triggered by out-of-memory errors that leave request memory uninitialized, enabling remote code execution. This flaw affects PHP 7.3, 8.2, 8.3, 8.4, and 8.5 across all deployments.
26 Oct 2026 Read more →
Critical
Exploited
CVE-2026-110447: Collabora Online CODE Server Command Injection Enables Remote Code Execution
Collabora Online Built-in CODE Server before version 26.4.303 is vulnerable to OS command injection in proxy.php when the CODE server is not running, allowing unauthenticated remote code execution. This flaw is actively exploited in production environments.
26 Oct 2026 Read more →
Critical
Exploited
CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Allows Privilege Escalation
An authenticated user can exploit SQL injection in VeloCloud Orchestrator to gain operator-level privileges and access internal functionality. This flaw is actively exploited and affects on-premises deployments across multiple versions.
26 Oct 2026 Read more →
High
Exploited
CVE-2026-106931: SiteGuard Server Edition OS command injection allows root/SYSTEM privilege escalation
E-guardian SiteGuard Server Edition versions 2.20 through 8.00 contain an OS command injection vulnerability (CWE-78) exploitable by local users with low privileges. Attackers can execute arbitrary commands with root or SYSTEM level access, fully compromising the host system.
23 Oct 2026 Read more →
High
Exploited
CVE-2026-96656 and 3 related: Plex Media Server multiple critical flaws enable file write, SSRF, and cross-plugin attack
Plex Media Server before version 1.43.3.10861 contains four distinct actively exploited vulnerabilities including arbitrary file write (CWE-73), server-side request forgery via two endpoints (CWE-918), and URL-scheme mishandling (CWE-84). Together, these allow admin users to achieve code e
23 Oct 2026 Read more →
Daily exploit watch
Monthly archive →
Securexion Daily Exploit Watch - 25 Oct 2026
PHP object injection in Prime Mover WordPress plugin allows unauthenticated attackers to execute code when admins perform routine backups; update immediately.
Securexion Daily Exploit Watch - 24 Oct 2026
Two actively exploited flaws demand immediate attention: Arista VeloCloud Orchestrator SQL injection (CVSS 9.9) and Collabora Online CODE Server command injection (CVSS 9.2). Patch or isolate these systems now.
Securexion Daily Exploit Watch - 23 Oct 2026
Five actively exploited flaws demand immediate action: OS command injection in SiteGuard Server Edition, multiple critical vulnerabilities in Plex Media Server, uncontrolled DLL loading in Siemens Software Center, and authentication bypass in Oracle Access Manager.
Securexion Daily Exploit Watch - 23 Oct 2026
Five actively exploited vulnerabilities demand immediate attention: SiteGuard OS command injection, four Plex Media Server flaws, and Siemens Software Center privilege escalation. Patch or isolate affected systems now.
Securexion Daily Exploit Watch - 22 Oct 2026
Critical PHP memory safety flaws in all supported versions (8.2–8.5) allow unauthenticated remote code execution via out-of-memory and global state corruption. Patch immediately.
Need help acting on these?
FutureOps InfoTech helps teams patch faster, monitor around the clock and secure their cloud.