Other October 2026 KEV entries
14 Oct: Ahsay AhsayCBS CVE-2026-105133 / -105134.
- Disclosed
What happened
- 20 Oct: SiteGuard Server Edition WAF command injection CVE-2026-106931 (fixed in Ver8.00 Update 5 and Ver7.00 Update 6); Siemens Software Center DLL search path CVE-2026-110936 (fixed in 4.0.9.8, used by the “Romulus” ClickFix campaign).
- 15 Oct: one entry.
Live scores
Live scores
CVE-2026-105133- EPSS
- 0.795
very likely to be attacked soon - VEDAS
- 0.987
strong exploit evidence - On CISA KEV
- Yes, since 2026-10-14
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Live scores
CVE-2026-105134- EPSS
- 0.818
very likely to be attacked soon - VEDAS
- 0.981
strong exploit evidence - On CISA KEV
- Yes, since 2026-10-14
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish. The vertical line is the day CISA added it to its exploited list.
Live scores
CVE-2026-106931- EPSS
- 0.025
some chance of attack soon - VEDAS
- 0.514
some exploit evidence - On CISA KEV
- Yes, since 2026-10-20
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2026-110936- EPSS
- 0.010
low predicted chance of attack - VEDAS
- 0.509
some exploit evidence - On CISA KEV
- Yes, since 2026-10-20
- Detection rule
- Out of scope (local)
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://www.cisa.gov/news-events/alerts/2026/10/20/cisa-adds-six-known-exploited-vulnerabilities-catalog
- https://www.heise.de/en/news/Attack-warnings-issued-for-Plex-SiteGuard-and-Siemens-Software-Center-11495087.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.