Patch now
Exploited or critical vulnerabilities in Linux and Unix server software, newest first. Not sure what CVE, CVSS or EPSS mean? See the glossary.
- Exploited Critical 10.0CVE-2026-97229GitLab CI/CD regular expression integer overflow allows unauthenticated RCEGitLab CE/EE · 2026-10-29
- Exploited High 7.8CVE-2026-46300Linux kernel ESP-in-TCP page-cache write to root (Fragnesia)Linux kernel · 2026-10-28
- Exploited Critical 9.2CVE-2026-111497Brotli decoder out-of-bounds write in Node.js enables RCE (Node2Shell)Brotli · 2026-10-27
- Exploited Critical 9.3CVE-2026-48356Adobe Commerce / Magento unrestricted file upload (APSB26-73)Magento / Adobe Commerce · 2026-10-27
- Exploited Critical 9.2CVE-2026-109618PHP out-of-memory handling corrupts request memory, remote code executionPHP · 2026-10-26
- Exploited Critical 9.2CVE-2026-109619PHP stale request state reused by the next request, remote code executionPHP · 2026-10-26
- High 7.4CVE-2026-105482Node.js dns.resolve*() silently truncates hostnames at a NUL byteNode.js · 2026-10-23
- High 7.4CVE-2026-105483Node.js TLS hostname check bypass with fullwidth-digit IP addressesNode.js · 2026-10-23
Updated 2026-11-03 18:05 UTC · all vulnerabilities · RSS
Start with your system
- LinuxLinux distributionsDebian, Ubuntu, RHEL, AlmaLinux, Rocky, CentOS, Fedora, SUSE, Amazon Linux, Arch and Alpine: update commands, supported releases and live patching.
- Unix & BSDUnix and BSD systemsFreeBSD, OpenBSD, NetBSD, IBM AIX, Oracle Solaris, HP-UX and macOS.
- LifecycleIs my OS still supported?End-of-life dates for every major Linux and Unix release, PHP, Node.js and Python.
- AutomateAutomatic security updatesSet up unattended updates safely, with schedules and reboot windows.
The patch cycle
Something already wrong?
Where the information comes from. The vulnerability list is rebuilt every hour from public, official sources: the CISA Known Exploited Vulnerabilities catalog, NVD, CVE.org, FIRST EPSS and the Debian, Ubuntu and Red Hat security trackers. Every page links to its sources. Read about our sources.