Security trends

What public security sources are talking about, ranked by attention, with the CveMate Priority label added to every topic. Attention is not severity: the label tells you whether the talk calls for action.

Live · 49 monitored sourcesScanned every 10 minutes · last collection 2026-11-03 15:30 UTC

Top 10

NEW not ranked 24 h earlierday not coveredPriority labelNo published record yet

Today

Last 24 hours

1=
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace period
2NEW
CVE-2022-1205linux linux_kernel
311
CVE-2026-58115siemens simatic_iot2050_advanced_firmware
41
CVE-2026-109618Seen 22 hours before the CVEPHP Memory Corruption Vulnerability
51
CVE-2026-109619Seen 22 hours before the CVEPHP Stale Internal Request-State Vulnerability
6NEW
CVE-2021-3640canonical ubuntu_linux
73
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
86
CVE-2026-111357Seen 20 hours before the CVEIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
96
CVE-2026-118527Seen 19 days before the CVEIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
10NEW
CVE-2022-49082scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()

Week

Last 7 days

12
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace period
2=
CVE-2026-111497Seen 5 hours before the CVEGoogle Brotli Unchecked Return Value Vulnerability
32
CVE-2026-109618Seen 22 hours before the CVEPHP Memory Corruption Vulnerability
4=
CVE-2026-109619Seen 22 hours before the CVEPHP Stale Internal Request-State Vulnerability
5=
CVE-2026-111357Seen 20 hours before the CVEIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
62
CVE-2026-118527Seen 19 days before the CVEIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
71
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
81
CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
92
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
1014
CVE-2026-58115siemens simatic_iot2050_advanced_firmware

Month

Last 30 days

1=
CVE-2026-109618Seen 22 hours before the CVEPHP Memory Corruption Vulnerability
2=
CVE-2026-109619Seen 22 hours before the CVEPHP Stale Internal Request-State Vulnerability
3=
CVE-2026-111497Seen 5 hours before the CVEGoogle Brotli Unchecked Return Value Vulnerability
4=
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace period
5=
CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
6=
CVE-2026-111357Seen 20 hours before the CVEIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
72
CVE-2026-118527Seen 19 days before the CVEIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
81
CVE-2026-111943Seen 11 hours before the CVEDistrust compromised intermediate certificates in crypto/x509
91
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
10=
CVE-2026-115560CVE not yet published

Still big, started earlier

Already talked about before today, and still in today's ranking: attention that has not gone away.

CVE-2026-98432Prioritise · ipv4: free inet_opt and ireq_opt after an RCU grace period5 of 7 days · since 2026-10-29
5 of 7 dayssince 2026-10-29
CVE-2026-109618Seen 22 hours before the CVEAct now · PHP Memory Corruption Vulnerability5 of 7 days · since 2026-10-20
5 of 7 dayssince 2026-10-20
CVE-2026-109619Seen 22 hours before the CVEAct now · PHP Stale Internal Request-State Vulnerability5 of 7 days · since 2026-10-20
5 of 7 dayssince 2026-10-20
CVE-2026-111357Seen 20 hours before the CVEAct now · Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability3 of 7 days · since 2026-10-14
3 of 7 dayssince 2026-10-14

Show 4 more

CVE-2026-118527Seen 19 days before the CVEAct now · Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability2 of 7 days · since 2026-10-14
2 of 7 dayssince 2026-10-14
CVE-2026-58115Prioritise · siemens simatic_iot2050_advanced_firmware1 of 7 days · since 2026-11-02
1 of 7 dayssince 2026-11-02
CVE-2026-104935Act now · Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability1 of 7 days · since 2026-10-13
1 of 7 dayssince 2026-10-13
CVE-2026-116366Prioritise · Unauthenticated RCE vulnerability against ClickHouse Server1 of 7 days · since 2026-10-30
1 of 7 dayssince 2026-10-30

How to read the rankings

Score: Attention across 49 monitored public sources, weighted by independent origins. A topic here is talked about, not necessarily exploited or critical.
Priority label: CveMate's own reading of the evidence, added on top of the public trend. How it is decided
CVE not yet published: The CVE id is reserved at cve.org, but its record is not published yet: NVD and cve.org have no details. Its page lists who mentioned it.
Reserved at cve.org: The CVE record is not published yet, but CveMate already has published evidence for it (for example CISA KEV), so it has a Priority label and a full page.
Seen 5 hours before the CVE: Our sources mentioned it at least an hour before its CVE record was published at cve.org (or, for a GitHub advisory, before GitHub published it).
Repository advisory: A GitHub advisory its maintainers published in their repository only: no CVE yet, and no vulnerability database lists it. Its page shows the advisory and who mentioned it.
Unverified CVE id: cve.org does not know the id (GitHub, for an advisory id): a typo in a source, or an id not even reserved yet.
NEW: Not ranked 24 hours earlier. Arrows show the rank change since then.
Hatched day: No data that day, which is not the same as a quiet day.
Sources: The source list is not published: it changes as sources are added or dropped for quality, and keeping it private keeps the ranking hard to game.