Vulnerability notices · 01/11/2026 05:17 Amsterdam time
ReconX Watchtower
ReconX Watchtower follows official advisories, CERTs, reputable researchers and the security community around the clock. When a vulnerability needs attention we publish what is known, what is not known yet and what to do - early, and updated as the evidence grows.
Confirmed · 11 Show all notices
- 3 · Confirmedsince 13/10/2026 23:00nginx: heap buffer overflows (CVE-2026-15176, CVE-2026-93479) fixed in 1.30.6 and 1.31.79.2Criticalnginx · CVE-2026-15176, CVE-2026-93479 · updated 26/10/2026≈57.39Minternet-facing systems run nginxShodan estimate · 01/11/2026
- 3 · Confirmedsince 13/10/2026 16:00Microsoft IIS: critical remote code execution flaw (CVE-2026-70024) fixed in Microsoft's October 2026 updates9.8CriticalMicrosoft IIS · CVE-2026-70024, CVE-2026-78459, CVE-2026-97830 · published 27/10/2026≈3.74Minternet-facing systems run Microsoft IISShodan estimate · 01/11/2026
- 3 · Confirmedsince 13/10/2026 16:00ASP.NET Core: multiple vulnerabilities fixed in Microsoft's .NET security release of 13/10/20269.4CriticalASP.NET · CVE-2026-102870, CVE-2026-109468, CVE-2026-114148 … · published 27/10/2026≈3.38Minternet-facing systems run ASP.NETShodan estimate · 01/11/2026
- 3 · Confirmedsince 21/10/2026Apache Tomcat: critical authentication bypass (CVE-2026-101296) and other flaws fixed in 11.0.27, 10.1.61 and 9.0.123Apache Tomcat · Critical · published 25/10/2026≈399,000internet-facing systems run Apache TomcatShodan estimate · 01/11/2026
- 3 · Confirmedsince 14/10/2026 16:31Fortinet FortiSandbox and FortiSIEM: authentication bypass (CVE-2026-107656) and path traversal (CVE-2026-106173), FortiSIEM flaw reported exploited9.8CriticalFortinet FortiSandbox · CVE-2026-106170, CVE-2026-106172, CVE-2026-106173 … · published 29/10/2026≥60internet-facing systems run Fortinet FortiSandboxShodan · at least · 01/11/2026
- 3 · Confirmedsince 23/10/2026 12:20Grafana: four authenticated flaws (CVE-2026-103506, CVE-2026-100105) fixed in 12.4.14, 13.0.12, 13.1.9, 13.2.58.9HighGrafana · CVE-2026-100105, CVE-2026-103506, CVE-2026-88858 … · published 01/11/2026
- 3 · Confirmedsince 29/10/2026 10:05Dell PowerProtect Data Domain: seven critical flaws (CVE-2026-103780, CVE-2026-90717) fixed by Dell9.8CriticalDell PowerProtect Data Domain OS · CVE-2026-103780, CVE-2026-103792, CVE-2026-103799 … · published 01/11/2026
- 3 · Confirmedsince 26/10/2026 13:29Zimbra Collaboration: multiple flaws incl. cross-site scripting (CVE-2026-10632, CVE-2026-50053), no fix known8.9HighSynacor Zimbra Collaboration Suite · CVE-2026-10631, CVE-2026-10632, CVE-2026-115785 … · published 01/11/2026
- 3 · Confirmedsince 30/10/2026Rails Active Storage: file read, possible code execution flaw (CVE-2026-66066) fixed in 7.2.3.2, 8.0.5.1, 8.1.3.19.5CriticalRuby on Rails trilogy · CVE-2026-66066 · published 01/11/2026
- 3 · Confirmedsince 29/10/2026 15:03Linux kernel: remote use-after-free in IPv4 TCP (CVE-2026-98432), exploit reported for MPTCP, no Ubuntu fix yet9.8CriticalLinux kernel · CVE-2026-98432 · updated 31/10/2026
- 3 · Confirmedsince 22/10/2026 14:11Python: ssl eMudhra CA distrust and tarfile fixes (CVE-2026-115557, CVE-2026-114583) in 3.14.10Python · High · published 29/10/2026
Pro CISO publishes ReconX Watchtower notices from public sources so organisations can act early. A notice describes an issue, never any organisation's systems. Times are Amsterdam time. Report a vulnerability in our systems.
ReconX Watchtower opened to the public on 24 October 2026, in the wake of PHP2Shell - our contribution to a safer digital ecosystem.