Free · every Monday · no account
The week's CVEs, in one email.
Every Monday morning (13:00 UTC) VulniPulse sends a short summary of what 34 vendors published the week before: critical and high advisories, new CISA KEV entries, changes to the CVEs you follow, and end-of-life dates coming up. Cover every vendor or only the ones you run.
The week's critical and high advisories
Vendor, product, CVSS, the fixed version when the vendor names one, and a link to the advisory.
New CISA KEV entries
Every CVE CISA added to its Known Exploited Vulnerabilities catalog that week, with the federal due date.
CVEs you follow
Follow up to 25 CVEs. The issue says if one was added to KEV, reported exploited, got a fix or changed severity.
End-of-life dates
Published end-of-support dates in the next 30 days for the vendors you chose.
Weekly digest or real-time alerts?
The digest is a weekly look back. If you need to know the day a vendor publishes, matched to the products and versions you run, that is what paid alerts are for.
- Digest: free, once a week, vendor or all-vendor summary.
- Alerts: within minutes of publication, per product, by email, Android and Discord. First month free, then US$15/month; card needed at checkout.
This week's issue
Built from last week's public advisories with the default selection: all vendors, high and critical. Your issue follows your own selection.
|
32
critical |
72
high |
2
added to KEV |
3
exploited |
222 new advisories in scope this week (44 medium, 8 low, 66 unrated).
Added to CISA KEV
|
CVE-2026-19868
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall · SonicOS · Listed 2026-11-06 · Federal due date 2026-11-20 |
|
CVE-2026-119977
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
Red Hat · WordPress Core · Listed 2026-11-03 · Federal due date 2026-11-06 |
Known exploited
|
Medium CISA KEV Exploited
Medium [CVE-2026-118527] Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk
Ivanti · Connect Secure · CVSS 4.3
|
Top critical and high advisories
94 more critical or high in your selection →
End-of-life dates in the next 30 days
|
Cisco ASA / Firepower: 5 releases or models
End of support on 2026-11-18 (in 10 days) Including ASDM 7.18(x), ASA / ASAv 9.18(x), FXOS 2.10(x) and 2 more |
|
GitLab GitLab CE / EE 19.5
End of active support on 2026-11-19 (in 11 days) |
|
GitLab GitLab CE / EE 19.3
End of support on 2026-11-19 (in 11 days) |
|
Atlassian Bamboo 10.1
End of support on 2026-11-20 (in 12 days) |
|
Atlassian Jira Software 10.2
End of support on 2026-11-20 (in 12 days) |
|
Palo Alto Cortex XDR agent 9.1
End of support on 2026-11-22 (in 14 days) |
|
Apache Spark 4.0
End of support on 2026-11-23 (in 15 days) |
|
Check Point Harmony (Endpoint/Mobile) Check Point Endpoint Security E88.72 for Windows
End of support on 2026-11 (in 22 days) |
|
Get alerts the minute advisories are published, matched to your products. First month free, then US$15/month; card needed at checkout. |
Details
We send a confirmation link first and nothing else until you click it. Every issue has a link to change your selection or pause it, and a one-click unsubscribe. You can delete your digest data from the same page.
We store your address, your selection and when issues were sent. See the privacy policy.
Content comes from the same public advisory pages on this site. Confirm fixes against the linked vendor advisory before change work.