NotCVE

The NotCVE mission is to provide a common space for cybersecurity !vulnerabilities that are not acknowledged by vendors but still are serious security issues.

[NotCVE @notCVE]

CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability

CVSS 9.8 · EPSS 1.7% · 6 public exploits

https://t.co/EFjPCYS4sG

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-10-08

CVE-2015-3306: ProFTPD Improper Access Control Vulnerability

CVSS 10 · EPSS 96.8% · 46 public exploits

Details, versions & intel → https://t.co/Zg6i7pBqRf

[NotCVE @notCVE]

CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability

CVSS 9.8 · EPSS 8.2% · 2 public exploits

https://t.co/eDlLEKOZbk

[NotCVE @notCVE]

🎯 Most likely to be exploited next (EPSS):

• CVE-2026-104286 — EPSS 2.2% · CVSS 9.8
• CVE-2026-105484 — EPSS 2.1% · CVSS 10
• CVE-2026-76146 — EPSS 1.9% · CVSS 8.4

📄 Full weekly tables → https://t.co/Ila6iW09Fw

[NotCVE @notCVE]

📊 Weekly Vulnerability Digest #13 (Oct 1–8):

📈 3,046 new CVEs — 435/day, peak 1,051
🔴 542 critical (CVSS ≥ 9)
💥 358 with a public exploit
⚠️ 4 added to CISA KEV — actively exploited

Top vendors: google (292) · chromium (258)

Search any of them → https://t.co/V2vZRjPJbc

[NotCVE @notCVE]

⚠️ New in CISA KEV this week — exploited in the wild:

• Zammad GmbH Zammad Improper Privilege… — CVSS 9.8
https://t.co/xASlEqPc14
• Zammad GmbH Zammad Session Fixation — CVSS 9.8
https://t.co/ARY9Vc29Jn
• Fortinet FortiMail Path Traversal — CVSS 9.8
https://t.co/4v4OLID8t5

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-10-04

CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer…

CVSS 9.1 · EPSS 0.5%

Details, versions & intel → https://t.co/y59k8k98Ao

[NotCVE @notCVE]

CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability

CVSS 9.8 · EPSS 0.3%

https://t.co/xASlEqPc14

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-10-02

CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

CVSS 9.8 · EPSS 0.6%

Details, versions & intel → https://t.co/ARY9Vc29Jn

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-10-01

CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability

CVSS 9.8

Details, versions & intel → https://t.co/4v4OLID8t5

[NotCVE @notCVE]

🎯 Most likely to be exploited next (EPSS):

• CVE-2026-12269 — EPSS 7% · CVSS 8.8
• CVE-2026-12268 — EPSS 4.7% · CVSS 8.8
• CVE-2026-100852 — EPSS 3.7% · CVSS 8.8

📄 Full weekly tables → https://t.co/hVDdDwLw9c

[NotCVE @notCVE]

📊 Weekly Vulnerability Digest #12 (Sep 24 – Oct 1):

📈 3,579 new CVEs — 511/day, peak 758
🔴 467 critical (CVSS ≥ 9)
💥 447 with a public exploit
⚠️ 9 added to CISA KEV — actively exploited

Top vendors: linux (608)

Wire it into your AI agent → https://t.co/KgOD2bq7Ka

[NotCVE @notCVE]

⚠️ New in CISA KEV this week — exploited in the wild:

• WSO2 Multiple Products Path… — CVSS 10
https://t.co/jMtxlKSz3w
• Cisco Catalyst SD-WAN Manager Hex… — CVSS 9.8
https://t.co/io7laIuRAm
• Citrix NetScaler Improper… — CVSS 9.8
https://t.co/R4BdPQYSOD

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-09-30

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

CVSS 9.8 · 1 public exploit

Details, versions & intel → https://t.co/io7laIuRAm

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-09-29

CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability

CVSS 8.8 · EPSS 0.8% · 2 public exploits

Details, versions & intel → https://t.co/nIsbUQCDdI

[NotCVE @notCVE]

NotCVE-2026-0016 · CVSS 7.1
https://t.co/60ssGGqJOa
NotCVE-2026-0017 · CVSS 6.5
https://t.co/RGI6wc482q
NotCVE-2026-0018 · CVSS 5.4
https://t.co/SCcdQ0qeoB
NotCVE-2026-0019 · CVSS 5.4
https://t.co/6Oaf8p6P9n

Credit: netspacer1124

[NotCVE @notCVE]

🚨 4 new NotCVEs — game-music-emu (libgme) through 0.6.5

Crafted .vgm, .gym and .ay music files can read past heap buffers or crash apps that embed libgme. No verified fix.

The 4 records ↓

#NotCVE #libgme #OOB #DoS #OpenSource

[NotCVE @notCVE]

CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability

CVSS 9.8

https://t.co/sWkQInINLV

[NotCVE @notCVE]

⚠️ ACTIVELY EXPLOITED — added to CISA KEV 2026-09-27

CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer…

CVSS 9.8 · 1 public exploit

Details, versions & intel → https://t.co/R4BdPQYSOD