Log in Start free

Weekly brief · 2026-W45 · Nov 6, 2026

iPatch weekly threat brief - 2026-W45

Automatic data summary (no AI used).

Threat level this week: Elevated. 5 vulnerabilities were added to CISA's exploited list in the last 7 days (0 linked to ransomware).

Exploited this week

  • CVE-2026-19868: SonicWall SonicOS SSLVPN - SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
  • CVE-2024-27834: Apple Multiple Products - Apple Multiple Products Improper Authentication Vulnerability
  • CVE-2026-119977: WordPress WordPress Core - WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
  • CVE-2026-118527: Ivanti Connect Secure - Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  • CVE-2026-111357: Ivanti Connect Secure - Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

Rising risk

  • CVE-2021-26086 (Jira Data Center): exploit odds 100.0% -> 100.0%
  • CVE-2021-22005 (VMware vCenter Server, VMware Cloud Foundation): exploit odds 100.0% -> 100.0%
  • CVE-2021-21985 (VMware vCenter Server and VMware Cloud Foundation): exploit odds 100.0% -> 100.0%
  • CVE-2021-26084 (Confluence Data Center): exploit odds 100.0% -> 100.0%
  • CVE-2021-1498 (Cisco HyperFlex HX Data Platform): exploit odds 100.0% -> 100.0%
  • CVE-2019-19781 (unknown product): exploit odds 100.0% -> 100.0%
  • CVE-2017-9841 (unknown product): exploit odds 100.0% -> 100.0%
  • CVE-2015-1635 (unknown product): exploit odds 100.0% -> 100.0%

New critical flaws