{"schema":"lattice-recent/3","generatedAt":"2026-11-06T00:17:14+00:00","builtAt":"2026-11-06T04:43:23.829Z","exploitedAsOf":"2026-11-04","note":"Ids to look up, most urgent first. daily: added or published in the last day or two. weekly: the last seven days, including everything in daily. exploited: listed by CISA as exploited in the wild. critical: scored critical by its CNA and not known to be exploited. open: exploited entries CISA added before the weekly window but within the last 30 days, overdue first (overdue means CISA's due date has passed; it says nothing about any machine). cvss is the score with its cvssVersion: for exploited entries it is NVD's (cvssSource nvd), for critical entries the CNA's own (cna); null when there is none. published (critical) is the date the CVE record was published, which can be later than the year in the id. Not being listed here says nothing about safety. Look each id up by its exact id on the Lattice server (graph_lookup).","daily":{"from":"2026-11-05","to":"2026-11-06","exploited":[{"id":"CVE-2026-119977","vendor":"WordPress","product":"WordPress Core","added":"2026-11-03","due":"2026-11-06","ransomware":"Unknown","cvss":8.1,"epss":0.01157,"priority":"today","cvssSource":"nvd","cvssVersion":"3.1"},{"id":"CVE-2024-27834","vendor":"Apple","product":"Multiple Products","added":"2026-11-04","due":"2026-11-18","ransomware":"Unknown","cvss":5.5,"epss":0.01414,"priority":"cycle","cvssSource":"nvd","cvssVersion":"3.1"}],"critical":[{"id":"CVE-2026-121489","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73098","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73099","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73100","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73101","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73116","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73117","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-96677","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-122303","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122304","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122310","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122311","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122313","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-111489","vendor":"TPC Software","product":"Matchpoint","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-111490","vendor":"TPC Software","product":"Matchpoint","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-71550","vendor":"SuiteCRM","product":"SuiteCRM","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"}]},"weekly":{"from":"2026-10-31","to":"2026-11-06","exploited":[{"id":"CVE-2026-119977","vendor":"WordPress","product":"WordPress Core","added":"2026-11-03","due":"2026-11-06","ransomware":"Unknown","cvss":8.1,"epss":0.01157,"priority":"today","cvssSource":"nvd","cvssVersion":"3.1"},{"id":"CVE-2024-27834","vendor":"Apple","product":"Multiple Products","added":"2026-11-04","due":"2026-11-18","ransomware":"Unknown","cvss":5.5,"epss":0.01414,"priority":"cycle","cvssSource":"nvd","cvssVersion":"3.1"}],"critical":[{"id":"CVE-2026-121489","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73098","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73099","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73100","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73101","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73116","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-73117","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-96677","vendor":"Apache Software Foundation","product":"Apache Juneau","cvss":10,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121615","vendor":"Linksys","product":"E5600","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121609","vendor":"Qihoo 360","product":"Whole Home Router M5","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121607","vendor":"Qihoo 360","product":"D603-2","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121606","vendor":"Qihoo 360","product":"D621-2","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121932","vendor":"Linksys","product":"E5350","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-121933","vendor":"Linksys","product":"E5350","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-122013","vendor":"Comfast","product":"CF-WR632AX","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-122051","vendor":"Edimax","product":"BR-6208AC","cvss":10,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-122303","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122304","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122310","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122311","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-122313","vendor":"kyverno","product":"kyverno","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-111489","vendor":"TPC Software","product":"Matchpoint","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-111490","vendor":"TPC Software","product":"Matchpoint","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"4.0"},{"id":"CVE-2026-71550","vendor":"SuiteCRM","product":"SuiteCRM","cvss":9.9,"published":"2026-11-05","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-121600","vendor":"TOTOLINK","product":"A950RG","cvss":9.9,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-121599","vendor":"TOTOLINK","product":"A950RG","cvss":9.9,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-121598","vendor":"TOTOLINK","product":"A950RG","cvss":9.9,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-121597","vendor":"TOTOLINK","product":"A950RG","cvss":9.9,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-97693","vendor":"xerrors","product":"Yuxi","cvss":9.9,"published":"2026-11-04","cvssSource":"cna","cvssVersion":"3.1"},{"id":"CVE-2026-28336","vendor":"SolarWinds","product":"Dameware","cvss":9.9,"published":"2026-11-03","cvssSource":"cna","cvssVersion":"3.1"}]},"open":{"windowDays":30,"from":"2026-10-08","to":"2026-11-06","exploited":[{"id":"CVE-2026-109618","vendor":"PHP Group","product":"PHP","added":"2026-10-26","due":"2026-10-29","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.99999,"priority":"today","overdue":true,"daysOverdue":8},{"id":"CVE-2026-109619","vendor":"PHP Group","product":"PHP","added":"2026-10-26","due":"2026-10-29","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.99999,"priority":"today","overdue":true,"daysOverdue":8},{"id":"CVE-2026-21589","vendor":"Atlassian","product":"Multiple Products","added":"2026-10-15","due":"2026-10-18","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.99664,"priority":"today","overdue":true,"daysOverdue":19},{"id":"CVE-2015-5477","vendor":"ISC","product":"BIND","added":"2026-10-08","due":"2026-10-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.99584,"priority":"today","overdue":true,"daysOverdue":26},{"id":"CVE-2015-3306","vendor":"ProFTPD","product":"ProFTPD","added":"2026-10-08","due":"2026-10-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.99497,"priority":"today","overdue":true,"daysOverdue":26},{"id":"CVE-2016-3081","vendor":"Apache","product":"Struts","added":"2026-10-08","due":"2026-10-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.96525,"priority":"today","overdue":true,"daysOverdue":26},{"id":"CVE-2026-104935","vendor":"Ivanti","product":"Connect Secure","added":"2026-10-13","due":"2026-10-16","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.88936,"priority":"today","overdue":true,"daysOverdue":21},{"id":"CVE-2026-105134","vendor":"Ahsay","product":"AhsayCBS","added":"2026-10-14","due":"2026-10-17","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.81763,"priority":"today","overdue":true,"daysOverdue":20},{"id":"CVE-2026-105133","vendor":"Ahsay","product":"AhsayCBS","added":"2026-10-14","due":"2026-10-17","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.7947,"priority":"today","overdue":true,"daysOverdue":20},{"id":"CVE-2026-102764","vendor":"BeyondTrust","product":"Remote Support","added":"2026-10-16","due":"2026-10-19","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.77994,"priority":"today","overdue":true,"daysOverdue":18},{"id":"CVE-2026-110447","vendor":"Collabora","product":"Collabora Online – Built-in CODE Server","added":"2026-10-23","due":"2026-10-26","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.73307,"priority":"today","overdue":true,"daysOverdue":11},{"id":"CVE-2026-97229","vendor":"GitLab","product":"Community Edition and Enterprise Edition","added":"2026-10-29","due":"2026-11-01","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.6522,"priority":"today","overdue":true,"daysOverdue":5},{"id":"CVE-2021-3199","vendor":"ONLYOFFICE","product":"Docs","added":"2026-10-08","due":"2026-10-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.30244,"priority":"today","overdue":true,"daysOverdue":26},{"id":"CVE-2026-46300","vendor":"Linux","product":"Kernel","added":"2026-10-28","due":"2026-10-31","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.1613,"priority":"today","overdue":true,"daysOverdue":6},{"id":"CVE-2026-96652","vendor":"Plex","product":"Media Server","added":"2026-10-20","due":"2026-11-03","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.11886,"priority":"today","overdue":true,"daysOverdue":3},{"id":"CVE-2026-96655","vendor":"Plex","product":"Media Server","added":"2026-10-20","due":"2026-11-03","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.10724,"priority":"today","overdue":true,"daysOverdue":3},{"id":"CVE-2026-96951","vendor":"Microsoft","product":"Windows","added":"2026-10-13","due":"2026-10-16","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.09813,"priority":"today","overdue":true,"daysOverdue":21},{"id":"CVE-2023-22894","vendor":"Strapi","product":"Strapi","added":"2026-10-08","due":"2026-10-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.04114,"priority":"today","overdue":true,"daysOverdue":26},{"id":"CVE-2026-106931","vendor":"EG Secure Solutions","product":"SiteGuard Server Edition","added":"2026-10-20","due":"2026-10-23","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.02528,"priority":"today","overdue":true,"daysOverdue":14},{"id":"CVE-2026-76519","vendor":"Cisco","product":"Secure Email Gateway","added":"2026-10-14","due":"2026-10-17","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.02152,"priority":"today","overdue":true,"daysOverdue":20},{"id":"CVE-2026-96654","vendor":"Plex","product":"Media Server","added":"2026-10-20","due":"2026-10-23","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.01949,"priority":"today","overdue":true,"daysOverdue":14},{"id":"CVE-2026-96656","vendor":"Plex","product":"Media Server","added":"2026-10-20","due":"2026-10-23","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.01785,"priority":"today","overdue":true,"daysOverdue":14},{"id":"CVE-2026-0322","vendor":"Palo Alto Networks","product":"PAN-OS","added":"2026-10-14","due":"2026-10-17","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.0174,"priority":"today","overdue":true,"daysOverdue":20},{"id":"CVE-2025-61624","vendor":"Fortinet","product":"Multiple Products","added":"2026-10-16","due":"2026-10-19","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.01343,"priority":"today","overdue":true,"daysOverdue":18},{"id":"CVE-2026-114625","vendor":"Arista","product":"VeloCloud Orchestrator","added":"2026-10-23","due":"2026-10-26","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.01025,"priority":"today","overdue":true,"daysOverdue":11},{"id":"CVE-2026-110936","vendor":"Siemens","product":"Software Center","added":"2026-10-20","due":"2026-11-03","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.00967,"priority":"today","overdue":true,"daysOverdue":3},{"id":"CVE-2026-76418","vendor":"Cisco","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","added":"2026-10-29","due":"2026-11-01","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.00821,"priority":"today","overdue":true,"daysOverdue":5},{"id":"CVE-2026-111357","vendor":"Ivanti","product":"Connect Secure","added":"2026-10-30","due":"2026-11-02","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.00533,"priority":"today","overdue":true,"daysOverdue":4},{"id":"CVE-2026-111497","vendor":"Google","product":"Brotli","added":"2026-10-27","due":"2026-11-10","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.82641,"priority":"week","overdue":false,"daysOverdue":0},{"id":"CVE-2026-48356","vendor":"Adobe","product":"Commerce and Magento","added":"2026-10-27","due":"2026-11-10","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.47472,"priority":"week","overdue":false,"daysOverdue":0},{"id":"CVE-2026-118527","vendor":"Ivanti","product":"Connect Secure","added":"2026-10-30","due":"2026-11-13","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.00822,"priority":"week","overdue":false,"daysOverdue":0},{"id":"CVE-2026-41709","vendor":"Broadcom","product":"VMware ESX","added":"2026-10-28","due":"2026-11-11","ransomware":"Unknown","cvss":null,"cvssSource":null,"cvssVersion":null,"epss":0.00689,"priority":"week","overdue":false,"daysOverdue":0}]}}