Covering Mon Oct 12 2026 00:00 UTC – Sun Oct 18 2026 23:59 UTC
8 newly exploited vulnerabilities discovered.
1. New Vulnerabilities Linked to Ransomware
No findings in this category this week.
2. Known Vulnerabilities with New Ransomware Indicators
No findings in this category this week.
3. Critical Zero-day Vulnerabilities
No findings in this category this week.
4. New Actively Exploited Vulnerabilities
CVE-2026-76519 affects Cisco Secure Email Gateway and can allow Path Traversal.
Scores: CVSS v3.1 9.8, EPSS 0.01573.
Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp
Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp
CVE-2026-85097 affects Bricksforge Bricksforge WordPress plugin and can allow Arbitrary File Upload leading to Remote Code Execution.
Scores: CVSS v3.1 9.8, EPSS 0.00312.
Source: https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
Advisory: https://bricksforge.io/version-changelog/
CVE-2026-102764 affects BeyondTrust Remote Support and can allow Authentication Bypass.
Scores: CVSS v4 9.3, EPSS 0.00601.
Source: https://cyber.gc.ca/en/alerts-advisories/al26-025-critical-vulnerability-impacting-beyondtrust-remote-support-cve-2026-102764
Advisory: https://www.beyondtrust.com/trust-center/security-advisories/bt26-05
CVE-2026-110447 affects Collabora Online – Built-in CODE Server (richdocumentscode) for Nextcloud and can allow OS Command Injection leading to Remote Code Execution.
Scores: CVSS v4 9.2, EPSS 0.01225.
Source: https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/
Advisory: https://github.com/CollaboraOnline/online/security/advisories/GHSA-g3vx-3m76-fghh
CVE-2026-96951 affects Microsoft Windows and can allow Command Injection.
Scores: CVSS v3.1 8.8, EPSS 0.01512.
Source: https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2026-monthly-rollup-av26-1038
Advisory: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-96951
CVE-2026-0322 affects Palo Alto Networks PAN-OS and can allow Remote Code Execution.
Scores: CVSS v4 8.6, EPSS 0.01215.
Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Advisory: https://security.paloaltonetworks.com/CVE-2026-0322
CVE-2026-104935 affects Ivanti Connect Secure and can allow Authentication Bypass leading to Remote Code Execution.
Scores: CVSS v3.1 8.6, EPSS 0.25982.
Source: https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035
Advisory: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US
Indicators suggest that this vulnerability was exploited as a zero-day before a patch was available.
CVE-2025-61624 affects Fortinet Multiple Products and can allow Path Traversal.
Scores: CVSS v3.1 6.0, EPSS 0.00580.
Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-122
Summary for the vulnerability management teams:
CVE-2026-76519, CVE-2026-85097, CVE-2026-102764, CVE-2026-110447, CVE-2026-96951, CVE-2026-0322, CVE-2026-104935, CVE-2025-61624
Sourced from CISA KEV, Five Eyes cybersecurity agencies, additional national and university CERTs, the NVD/CVE List, EPSS, and more than 65 other reputable external sources.
Full archive: https://signals.mostexploited.com/weekly/2026-w42/
Vulnerability intelligence focused on exploitable vulnerabilities.