The Alert Tracker lists the vulnerabilities and attacks we think security teams should act on now: actively exploited flaws in widely used products, serious supply-chain compromises, major ransomware campaigns and government emergency directives. Each row links to our article, which carries the sources.
Rows are added when we publish an Alert and updated when the status changes, for example when a patch ships or CISA adds a CVE to its Known Exploited Vulnerabilities catalogue. Mitigated alerts stay on the list for the record.
| Date | Alert | CVE(s) | Vendor / product | Severity | Status | Last updated |
|---|---|---|---|---|---|---|
| 24 Oct 2026 | Arista EOS CVE-2026-7473: still unfixed, and no fix is coming | CVE-2026-7473 | Arista: EOS on 7020R, 7280R/R2, 7500R/R2 (limited: 7280R3, 7500R3, 7800R3) | Medium | Actively exploited | 24 Oct 2026 |
| 24 Oct 2026 | LiteLLM 1.107.0 was poisoned: rotate every secret it could reach | MAL-2026-2144 | BerriAI: LiteLLM 1.107.0 (PyPI, Docker Hub, GHCR) | Critical | Actively exploited | 24 Oct 2026 |
| 23 Oct 2026 | SafePay: joint advisory on a ransomware crew with 600-plus victimsSeverity: major ransomware campaign | CVE-2020-3259 CVE-2023-20269 CVE-2023-27532 CVE-2024-40711 CVE-2024-40766 | Cisco ASA, Veeam Backup & Replication, SonicWall (SafePay ransomware) | High | Actively exploited | 23 Oct 2026 |
| 23 Oct 2026 | ConnectWise Cloud Backup: Storm-0940 and an AI-paced supply-chain attackSeverity: supply-chain compromise | — | ConnectWise: Cloud Backup (formerly SkyKick) | Critical | Mitigated | 23 Oct 2026 |
| 23 Oct 2026 | Plex2Shell is being exploited: patch Plex, then assume compromiseSeverity: chain scored 9.8 by the researcher | CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656 | Plex: Plex Media Server | Critical | Actively exploited | 23 Oct 2026 |
| 22 Oct 2026 | PHP2Shell: patch PHP now, then go huntingSeverity: CVSS v4.0 9.2 per PHP; NVD v3.1 9.8 for CVE-2026-109618 | CVE-2026-109618 CVE-2026-109619 | PHP: PHP 8.2 to 8.5 | Critical | Exploitation attempts seen | 23 Oct 2026 |
Click a column heading to sort. Severity and status are our editorial assessment; follow each link for the sources.