Threat pulse · articles
Newly exploited vulnerabilities and joint advisories from CISA, refreshed every six hours, next to Buguardian's own articles. Each card says what it means for your exposure.
4 Nov 2026 · CISA KEV
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
Buguardian Vulnerability Management flags this with the CISA due date: 18 Nov 2026.
3 Nov 2026 · 2 min read
Seven weighted categories, published weights and a deterministic calculation. Here is what goes into the number, and what never does.
3 Nov 2026 · CISA KEV
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is…
Buguardian Vulnerability Management flags this with the CISA due date: 6 Nov 2026.
30 Oct 2026 · CISA KEV
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location…
Buguardian Vulnerability Management flags these with the CISA due date: 2 Nov 2026.
29 Oct 2026 · CISA KEV
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially…
Buguardian Vulnerability Management flags this with the CISA due date: 1 Nov 2026.
29 Oct 2026 · CISA KEV
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the…
Buguardian Vulnerability Management flags this with the CISA due date: 1 Nov 2026.
28 Oct 2026 · CISA KEV
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Buguardian Vulnerability Management flags this with the CISA due date: 11 Nov 2026.
28 Oct 2026 · CISA KEV
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during…
Buguardian Vulnerability Management flags this with the CISA due date: 31 Oct 2026.
27 Oct 2026 · CISA KEV
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining…
Buguardian Vulnerability Management flags this with the CISA due date: 10 Nov 2026.
Where this comes from
The catalog of vulnerabilities confirmed as exploited in the wild, with a remediation due date. Buguardian Vulnerability Management flags these on every matching finding.
Detailed advisories on active threat groups and techniques, such as #StopRansomware. Buguardian's threat bulletin brings notices like this into one view.
How the platform works, what changed in the product, and how to read the posture score — written by the Buguardian team.
Summaries come from CISA, a US government source in the public domain. Always check the linked source before acting.
Buguardian matches exploited vulnerabilities against your own assets and tells you what to fix first.
