Vulnerability notices · 05/11/2026 15:17 Amsterdam time
ReconX Watchtower
ReconX Watchtower follows official advisories, CERTs, reputable researchers and the security community around the clock. When a vulnerability needs attention we publish what is known, what is not known yet and what to do - early, and updated as the evidence grows.
Confirmed · 27 · page 2 of 2 Show all notices
- 3 · Confirmedsince 13/10/2026 16:00ASP.NET Core: multiple vulnerabilities fixed in Microsoft's .NET security release of 13/10/20269.4CriticalASP.NET · CVE-2026-102870, CVE-2026-109468, CVE-2026-114148 … · published 27/10/2026≈3.58Minternet-facing systems run ASP.NETShodan estimate · 05/11/2026
- 3 · Confirmedsince 21/10/2026Apache Tomcat: critical authentication bypass (CVE-2026-101296) and other flaws fixed in 11.0.27, 10.1.61 and 9.0.123Apache Tomcat · Critical · published 25/10/2026≈404,000internet-facing systems run Apache TomcatShodan estimate · 05/11/2026
Pro CISO publishes ReconX Watchtower notices from public sources so organisations can act early. A notice describes an issue, never any organisation's systems. Times are Amsterdam time. Report a vulnerability in our systems.
ReconX Watchtower opened to the public on 24 October 2026, in the wake of PHP2Shell - our contribution to a safer digital ecosystem.