Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA, the probability of exploitation (EPSS) and public exploits – each one researched individually: what is affected, what helps, what to do.
Per day (UTC); hover over a bar for the figures.
| Day | Critical | High | Medium | Low | Not rated | Total |
|---|---|---|---|---|---|---|
| Sun, 1 Nov 2026 | 8 | 11 | 14 | 9 | 29 | 71 |
| Sat, 31 Oct 2026 | 11 | 41 | 44 | 0 | 16 | 112 |
| Fri, 30 Oct 2026 | 44 | 216 | 259 | 30 | 120 | 669 |
| Thu, 29 Oct 2026 | 66 | 191 | 218 | 22 | 40 | 537 |
| Wed, 28 Oct 2026 | 35 | 215 | 209 | 31 | 136 | 626 |
| Tue, 27 Oct 2026 | 69 | 188 | 177 | 33 | 181 | 648 |
| Mon, 26 Oct 2026 | 21 | 130 | 245 | 55 | 287 | 738 |
| Sun, 25 Oct 2026 | 3 | 31 | 66 | 26 | 5 | 131 |
| Sat, 24 Oct 2026 | 12 | 19 | 35 | 6 | 1 | 73 |
| Fri, 23 Oct 2026 | 40 | 169 | 90 | 27 | 166 | 492 |
| Thu, 22 Oct 2026 | 69 | 160 | 206 | 55 | 2 | 492 |
| Wed, 21 Oct 2026 | 50 | 218 | 225 | 47 | 2 | 542 |
| Tue, 20 Oct 2026 | 169 | 813 | 812 | 127 | 2 | 1,923 |
| Mon, 19 Oct 2026 | 29 | 128 | 204 | 66 | 10 | 437 |
| Sun, 18 Oct 2026 | 10 | 55 | 65 | 19 | 400 | 549 |
| Sat, 17 Oct 2026 | 4 | 42 | 50 | 4 | 0 | 100 |
| Fri, 16 Oct 2026 | 53 | 179 | 219 | 14 | 0 | 465 |
| Thu, 15 Oct 2026 | 51 | 232 | 244 | 19 | 0 | 546 |
| Wed, 14 Oct 2026 | 92 | 374 | 285 | 30 | 43 | 824 |
| Tue, 13 Oct 2026 | 170 | 1,361 | 729 | 43 | 0 | 2,303 |
| Mon, 12 Oct 2026 | 48 | 264 | 282 | 80 | 0 | 674 |
| Sun, 11 Oct 2026 | 16 | 73 | 101 | 39 | 0 | 229 |
| Sat, 10 Oct 2026 | 78 | 143 | 178 | 13 | 0 | 412 |
| Fri, 9 Oct 2026 | 42 | 152 | 105 | 11 | 5 | 315 |
| Thu, 8 Oct 2026 | 62 | 194 | 220 | 21 | 0 | 497 |
| Wed, 7 Oct 2026 | 53 | 131 | 145 | 9 | 2 | 340 |
| Tue, 6 Oct 2026 | 105 | 371 | 345 | 38 | 155 | 1,014 |
| Mon, 5 Oct 2026 | 31 | 119 | 210 | 45 | 0 | 405 |
| Sun, 4 Oct 2026 | 13 | 16 | 28 | 11 | 0 | 68 |
| Sat, 3 Oct 2026 | 5 | 45 | 57 | 8 | 0 | 115 |
196 vulnerabilities · Vendor: IBM
IBM WebSphere Application Server Liberty versions 20.0.0.12 through 26.0.0.10 contain an incorrect authorization flaw (CWE-863). A remote attacker can bypass security restrictions. IBM states the issue applies when the grpc-1.0 feature is enabled, and the bulletin lists no workaround.
IBM · WebSphere Application Server Liberty
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected when the samlWeb-2.0 feature (SAML Web SSO) is enabled. A remote, unauthenticated attacker can bypass authentication over the network without user interaction and potentially gain access to protected functions. IBM classifies the weakness as CWE-384 Session Fixation, while the description refers to an authentication bypass. Servers without samlWeb-2.0 are not affected.
IBM · WebSphere Application Server Liberty
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected when the batchManagement-1.0 feature is enabled. An unauthenticated remote attacker can exploit the flaw over the network without user interaction to corrupt the persisted status of batch job instances. According to IBM, the impact is limited to integrity (high) and availability (low), with no confidentiality impact.
IBM · WebSphere Application Server Liberty
IBM WebSphere Application Server Liberty versions 20.0.0.12 through 26.0.0.10 contain an improper access control flaw in gRPC service methods when the grpc-1.0 feature is enabled. An unauthenticated remote attacker can bypass access controls configured on these methods over the network, without user interaction. IBM rates the issue CVSS 9.1 (Critical) with high confidentiality and integrity impact. The vendor bulletin lists no known exploitation at the time of publication.
IBM · WebSphere Application Server Liberty
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 do not sufficiently isolate servers that share one installation. The flaw applies when the restConnector-1.0 or restConnector-2.0 feature is enabled. An attacker with low privileges on one server could affect the confidentiality and integrity of other servers on the same installation, and the attack complexity is high with no user interaction required.
IBM · WebSphere Application Server Liberty
IBM WebSphere Application Server Liberty (17.0.0.3 to 26.0.0.10) and the traditional WebSphere Application Server 8.5 and 9.0 do not properly verify cryptographic signatures. A remote, unauthenticated attacker may bypass this check, which IBM rates with high confidentiality and integrity impact. According to IBM, the flaw affects Liberty deployments that use the openidConnectClient-1.0, openidConnectServer-1.0, socialLogin-1.0, jwt-1.0 or jwtSso-1.0 features; the attack complexity is high.
IBM · WebSphere Application Server
ContextForge (mcp-context-forge) ships with a publicly known default JWT_SECRET_KEY in its source code and .env.example. Because the token verification accepts HS256 tokens signed with this key and can create a platform administrator from the token subject when REQUIRE_USER_IN_DB is false, an unauthenticated remote attacker can forge administrator tokens without a database account. Forged access persists after password changes, account deletion and session revocation as long as the default key remains configured and the platform-admin bootstrap is enabled, allowing disclosure, modification and service disruption.
IBM · ContextForge MCP Gateway
IBM i 7.3, 7.4, 7.5 and 7.6 contain an improper data sanitization flaw (CWE-94) in the HTTP Server Administration web application. A remote attacker with valid credentials for this admin interface can obtain sensitive information or execute arbitrary code on the system. IBM rates the issue CVSS 9.9 (Critical), as the attack needs only low privileges but changes scope and affects confidentiality, integrity and availability.
IBM · i
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal flaw (CWE-22) caused by improper validation of pathnames. According to IBM's description, a remote attacker with a valid user account can exploit it over the network without user interaction to execute arbitrary code. NVD rates the issue 9.9 (critical), while IBM's bulletin rates it 9.6 with no confidentiality impact. No public exploit is known.
IBM · DataStage on Cloud Pak for Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an input neutralization flaw that allows arbitrary code execution on the underlying system. A remote attacker with valid low-privilege credentials can exploit it over the network, with no user interaction needed. The CVE record and NVD list the weakness as CWE-94, while the IBM bulletin's sibling entries use CWE-78 (OS command injection); the exact classification should be confirmed on NVD and the IBM bulletin.
IBM · DataStage on Cloud Pak for Data
Research and translation in progress – available shortly.
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability (CWE-22). A remote attacker with a valid low-privilege account can cause a denial of service. IBM's bulletin also describes a CVSS vector with high integrity impact, which does not match the description, so the vector should be verified. No public exploit code or KEV listing was found at the time of research.
IBM · DataStage on Cloud Pak for Data
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an OS command injection flaw (CWE-78) that allows a remote attacker with valid low-privilege credentials to execute arbitrary operating system commands. No user interaction is required, and the CVSS 8.8 score reflects high impact on confidentiality, integrity and availability. The risk depends on whether DataStage is reachable by untrusted users or networks and how many accounts can log in.
IBM · DataStage on Cloud Pak for Data
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
IBM Planning Analytics 2.0 and 2.1 (Planning Analytics Local, Workspace component) contain a path traversal flaw caused by improper validation of file paths. A remote attacker can read arbitrary files on the host and overwrite certain application files. The official record gives CVSS 3.1 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), which means no authentication or user interaction is required; the IBM bulletin lists 8.1 for the same CWE-22 entry.
IBM · Planning Analytics
IBM Planning Analytics 2.0 and 2.1 (on-premise Local edition) contain an authentication bypass caused by improper validation of sub-requests. A remote attacker can bypass authentication and escalate privileges, which IBM rates with high impact to confidentiality, integrity and availability. The NVD record and the IBM bulletin list different CVSS scores for this CVE, so verify the score before using it for prioritisation.
IBM · Planning Analytics
IBM Planning Analytics 2.0 and 2.1 contain an improper authentication flaw that allows a remote attacker to gain unauthorized administrative access. According to the NVD, the attack requires low privileges, so an attacker with any valid user account may be able to reach administrative functions. IBM and NVD rate the vulnerability 8.8 (High), with full impact on confidentiality, integrity and availability.
IBM · Planning Analytics
The tracker combines official, freely usable data sources – updated continuously:
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.
