Threat Intelligence

Vulnerability Advisories

9 Realms tracks the CISA Known Exploited Vulnerabilities catalog and surfaces the threats most relevant to your environment. Click any entry for our full advisory.

Internet Threat Level: Normal· SANS Internet Storm Center

Ransomware-associated only

1,748 entries in CISA KEV

CVE-2026-102764

+3d

BeyondTrust · Remote Support

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

Added Oct 16, 2026View Advisory →

CVE-2025-61624

+3d

Fortinet · Multiple Products

Fortinet Multiple Products Path Traversal Vulnerability

Added Oct 16, 2026View Advisory →

CVE-2026-21589

+4d

Atlassian · Multiple Products

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Added Oct 15, 2026View Advisory →

CVE-2026-105134

+5d

Ahsay · AhsayCBS

Ahsay AhsayCBS Command Injection Vulnerability

Added Oct 14, 2026View Advisory →

CVE-2026-76519

+5d

Cisco · Secure Email Gateway

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Added Oct 14, 2026View Advisory →

CVE-2026-105133

+5d

Ahsay · AhsayCBS

Ahsay AhsayCBS Improper Authentication Vulnerability

Added Oct 14, 2026View Advisory →

CVE-2026-0322

+5d

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS Code Injection Vulnerability

Added Oct 14, 2026View Advisory →

CVE-2026-104935

+6d

Ivanti · Connect Secure

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Added Oct 13, 2026View Advisory →

CVE-2026-96951

+6d

Microsoft · Windows

Microsoft Windows Command Injection Vulnerability

Added Oct 13, 2026View Advisory →

CVE-2015-5477

+11d

ISC · BIND

ISC BIND Data Processing Errors Vulnerability

Added Oct 8, 2026View Advisory →

CVE-2016-3081

+11d

Apache · Struts

Apache Struts Command Injection Vulnerability

Added Oct 8, 2026View Advisory →

CVE-2023-22894

+11d

Strapi · Strapi

Strapi Cleartext Storage of Sensitive Information Vulnerability

Added Oct 8, 2026View Advisory →

CVE-2021-3199

+11d

ONLYOFFICE · Docs

ONLYOFFICE Docs Server Path Traversal Vulnerability

Added Oct 8, 2026View Advisory →

CVE-2015-3306

+11d

ProFTPD · ProFTPD

ProFTPD Improper Access Control Vulnerability

Added Oct 8, 2026View Advisory →

CVE-2026-88779

+15d

Citrix · NetScaler

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Added Oct 4, 2026View Advisory →

CVE-2026-102490

+17d

Zammad GmbH · Zammad

Zammad GmbH Zammad Improper Privilege Management Vulnerability

Added Oct 2, 2026View Advisory →

CVE-2026-102489

+17d

Zammad GmbH · Zammad

Zammad GmbH Zammad Session Fixation Vulnerability

Added Oct 2, 2026View Advisory →

CVE-2026-104286

+18d

Fortinet · FortiMail

Fortinet FortiMail Path Traversal Vulnerability

Added Oct 1, 2026View Advisory →

CVE-2026-76504

+19d

Cisco · Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Added Sep 30, 2026View Advisory →

CVE-2026-86950

+20d

Apple · Multiple Products

Apple Multiple Products Out-of-Bounds Write Vulnerability

Added Sep 29, 2026View Advisory →

CVE-2026-88772

+22d

Citrix · NetScaler

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Added Sep 27, 2026View Advisory →

CVE-2026-88771

+22d

Citrix · NetScaler

Citrix NetScaler Improper Input Validation Vulnerability

Added Sep 27, 2026View Advisory →

CVE-2026-67279

+24d

MikroTik · RouterOS

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Added Sep 25, 2026View Advisory →

CVE-2026-65660

+24d

Microsoft · SharePoint

Microsoft SharePoint Code Injection Vulnerability

Added Sep 25, 2026View Advisory →

Page 1 of 73

Vulnerability data sourced from the CISA Known Exploited Vulnerabilities catalog. Threat level data from the SANS Internet Storm Center. Catalog contains 1,748 entries (version 2026.10.16).