Vulnerability notices · 01/11/2026 05:17 Amsterdam time
ReconX Watchtower
ReconX Watchtower follows official advisories, CERTs, reputable researchers and the security community around the clock. When a vulnerability needs attention we publish what is known, what is not known yet and what to do - early, and updated as the evidence grows.
Current notices · 30 · page 2 of 2
- 3 · Confirmedsince 26/10/2026 13:29Zimbra Collaboration: multiple flaws incl. cross-site scripting (CVE-2026-10632, CVE-2026-50053), no fix known8.9HighSynacor Zimbra Collaboration Suite · CVE-2026-10631, CVE-2026-10632, CVE-2026-115785 … · published 01/11/2026
- 3 · Confirmedsince 30/10/2026Rails Active Storage: file read, possible code execution flaw (CVE-2026-66066) fixed in 7.2.3.2, 8.0.5.1, 8.1.3.19.5CriticalRuby on Rails trilogy · CVE-2026-66066 · published 01/11/2026
- 3 · Confirmedsince 29/10/2026 15:03Linux kernel: remote use-after-free in IPv4 TCP (CVE-2026-98432), exploit reported for MPTCP, no Ubuntu fix yet9.8CriticalLinux kernel · CVE-2026-98432 · updated 31/10/2026
- 3 · Confirmedsince 22/10/2026 14:11Python: ssl eMudhra CA distrust and tarfile fixes (CVE-2026-115557, CVE-2026-114583) in 3.14.10Python · High · published 29/10/2026
- 2 · Corroboratedsince 27/10/2026YOOtheme Pro: unauthenticated remote code execution (CVE-2026-102785) fixed in 5.0.53, reported exploited10.0CriticalYOOtheme Pro · CVE-2026-102785 · published 01/11/2026
Pro CISO publishes ReconX Watchtower notices from public sources so organisations can act early. A notice describes an issue, never any organisation's systems. Times are Amsterdam time. Report a vulnerability in our systems.
ReconX Watchtower opened to the public on 24 October 2026, in the wake of PHP2Shell - our contribution to a safer digital ecosystem.