Snapshot Source dates & coverage
- NVD
- Feed 7 Nov 2026. Publication and severity; recent records may be incomplete.
- CISA KEV
- Released 6 Nov 2026. Confirmed exploitation; absence does not establish safety.
- FIRST EPSS
- Scored 7 Nov 2026. Probability of exploitation activity in the next 30 days, not severity.
Public intelligence, not an inventory or a record of your remediation. Confirm affected versions, exposure and business impact before deciding what to fix. CISA due dates apply to US federal civilian agencies.
This week
3 new KEV listings in the last 7 days.
New KEV entries and elevated EPSS for your shift handover. Match these signals to your assets before acting.
About
CISA's federal deadlines are optional here. Enable them if your organisation follows them or uses them as a benchmark. This includes dates in triage and exports; KEV exploitation signals always remain visible. CISA guidance
Start here
New KEV listings, then up to 2 fresh CVEs with the highest available EPSS. Check asset and version applicability before prioritising action.
- 1 New KEV listing SonicWall SonicOS SSLVPNHigh 7.5 · EPSS 0.6%
- 2 New KEV listing Apple Multiple ProductsMedium 5.5 · EPSS 1.5%
- 3 New KEV listing WordPress CoreHigh 8.1 · EPSS 1.2%
- 4 Elevated EPSS Zoho Corp ManageEngine Key Manager PlusPublished 4 Nov 2026 · High 8.8 · EPSS 15.6%
Figure 15. Fresh Critical and High CVEs, by product
Published in the last 7 days: one row per product, ranked by its highest available EPSS. 1 has EPSS of 10% or more. EPSS is a probability signal, not a finding of exposure or exploitation.
| Vendor · product | CVEs | Highest | Severity | EPSS |
|---|---|---|---|---|
| Zoho Corp ManageEngine Key Manager Plus | 4 Nov 2026 | High 8.8 | 15.6% | |
| Nagios Enterprises Nagios Xi | 3 Nov 2026 | High 7.2 | 4.1% | |
| Suitecrm | 5 Nov 2026 | High 7.7 | 3.8% | |
| Wavlink WN536AX6-A | 2 Nov 2026 | Critical 10.0 | 3.2% | |
| Wavlink WN553X1-B | 1 Nov 2026 | Critical 9.1 | 2.8% | |
| Quest Foglight For Databases | 4 Nov 2026 | High 8.2 | 2.8% | |
| Linksys WRT54GL | 4 Nov 2026 | Critical 9.1 | 2.7% | |
| Edimax BR-6208AC | 5 Nov 2026 | Critical 10.0 | 2.6% | |
| Zoho Corp ManageEngine Password Manager Pro | 2 Nov 2026 | High 8.8 | 2.5% | |
| Linksys E5350 | 4 Nov 2026 | Critical 10.0 | 2.4% | |
| Control Web Panel | 2 Nov 2026 | High 8.8 | 2.3% | |
| Wavlink WN701AE | 1 Nov 2026 | Critical 9.9 | 2.2% | |
| Zoho Corp ManageEngine Eventlog Analyzer | 2 Nov 2026 | High 8.7 | 2.2% | |
| Dell OpenManage Enterprise | 2 Nov 2026 | High 8.0 | 2.2% | |
| Wavlink WL-WN579A3-A | 1 Nov 2026 | Critical 10.0 | 2.1% | |
Figure 16. CVEs published per day
Published CVEs, split by whether a severity score is available