Vulnerability notices · 01/11/2026 03:17 Amsterdam time
ReconX Watchtower
ReconX Watchtower follows official advisories, CERTs, reputable researchers and the security community around the clock. When a vulnerability needs attention we publish what is known, what is not known yet and what to do - early, and updated as the evidence grows.
Current notices · 30 · page 2 of 2
- 4 · Exploitedsince 16/10/2026Fortinet: CLI path traversal (CVE-2025-61624), actively exploited (FG-IR-26-122)6.5MediumFortinet FortiGate (FortiOS) · CVE-2025-61624 · published 26/10/2026≈394,000internet-facing systems run Fortinet FortiGate (FortiOS)Shodan estimate · 01/11/2026
- 4 · Exploitedsince 16/10/2026BeyondTrust Remote Support: actively exploited zero-day (CVE-2026-102764), patch BT26-05-RS9.3CriticalBeyondTrust Remote Support / PRA · CVE-2026-102764 · published 26/10/2026
- 4 · Exploitedsince 14/10/2026Cisco Secure Email Gateway (AsyncOS): root code execution via a crafted email attachment (CVE-2026-76519), actively exploited9.8CriticalCisco Secure Email Gateway (AsyncOS) · CVE-2026-76519 · updated 26/10/2026≥2,357internet-facing systems run Cisco Secure Email Gateway (AsyncOS)Shodan · at least · 01/11/2026
- 3 · Confirmedsince 13/10/2026 23:00nginx: heap buffer overflows (CVE-2026-15176, CVE-2026-93479) fixed in 1.30.6 and 1.31.79.2Criticalnginx · CVE-2026-15176, CVE-2026-93479 · updated 26/10/2026≈57.39Minternet-facing systems run nginxShodan estimate · 01/11/2026
- 3 · Confirmedsince 21/10/2026Apache Tomcat: critical authentication bypass (CVE-2026-101296) and other flaws fixed in 11.0.27, 10.1.61 and 9.0.123Apache Tomcat · Critical · published 25/10/2026≈399,000internet-facing systems run Apache TomcatShodan estimate · 01/11/2026
Pro CISO publishes ReconX Watchtower notices from public sources so organisations can act early. A notice describes an issue, never any organisation's systems. Times are Amsterdam time. Report a vulnerability in our systems.
ReconX Watchtower opened to the public on 24 October 2026, in the wake of PHP2Shell - our contribution to a safer digital ecosystem.