Do now Restrict access to Cisco Catalyst SD-WAN Manager from untrusted networks now, and check Cisco's advisory for a fix. No fix named yet. Last checked 24 Oct, 13:17 UTC. Advisory
Re-plated 24 Oct
Decaf: just the things that can hurt you. Breaches, news and anything below high are off the menu.
4 of 82 specials. Clear
On holdStatus unknown4
Nobody has said yet. Read the advisory.
-
Cisco Catalyst SD-WAN Manager Hex Encoding Order up (fix available)→ On hold (status unknown) KEV ✓ Record ✓ Vendor ✓ -
BeyondTrust Remote Support Authentication Bypass by Spoofing Do now Restrict network access to BeyondTrust Remote Support and watch for a vendor fix. No fix named yet. Last checked 24 Oct, 13:17 UTC. AdvisoryKEV ✓ Record ✓ Vendor ✓ -
YOOtheme Pro for Joomla Remote code execution Do now Restrict public access to YOOtheme Pro's image transformation handler until a vendor fix is released. No fix named yet. Last checked 24 Oct, 13:17 UTC. AdvisoryKEV – Record ✓ Vendor ✓
-
SonicWall SMA 1000 SMA1000 Appliance Work Place: server-side request forgery Do now Restrict access to the SMA1000 Work Place interface and watch for a vendor fix. No fix named yet. Last checked 24 Oct, 13:17 UTC. AdvisoryKEV – Record ✓ Vendor ✓
359 spills in 12 months
Worst days: 23 Oct 2026 (33 new), 22 Oct 2026 (19 new), 24 Oct 2026 (5 new), 21 Oct 2026 (9 new), 2 Sept 2026 (6 new)
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.