Patch today
Patch these first
Of the dozens of critical CVEs published every day, these are the most dangerous. The Kolun priority score (0-100) combines active exploitation (CISA KEV), the chance of attack in the next 30 days (EPSS), severity (CVSS), a public exploit and how widely the product is used.
-
88 Critical
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configuratio…
Actively exploited (KEV) · 2026-11-09 EPSS 1% Public exploit Widely used productWhat to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-12) References & patch
-
77 High
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may …
Actively exploited (KEV) · 2026-11-04 EPSS 1.5% Widely used productWhat to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-18) References & patch
-
74 High
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enfor…
Actively exploited (KEV) · 2026-11-06 EPSS 0.6% Widely used productWhat to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-20) References & patch
-
72 Highsignalwire freeswitch
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
Actively exploited (KEV) · 2026-11-09 EPSS 1.2%What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-12) References & patch
-
69 HighWordPress Foundation WordPress
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
Actively exploited (KEV) · 2026-11-03 EPSS 1.1%What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-06) References & patch
-
61 Highgpustack gpustack
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
Actively exploited (KEV) · 2026-11-09 EPSS 0.3%What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-12) References & patch
-
61 HighIvanti Connect Secure
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
Actively exploited (KEV) · 2026-10-30 EPSS 0.8%What to do: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see… (CISA deadline: 2026-11-13) References & patch
Score: 40 actively exploited + up to 25 attack likelihood (EPSS) + up to 15 severity (CVSS) + 10 public exploit + up to 10 how widely used. Critical >= 80, high 60-79, medium 35-59; this list shows scores of 45 and up.