Latest critical CVEs

1. 10.0 CVE-2026-97229 (cve.org, opens in a new tab) Exploited

   GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

   Exploited, added Oct 28 · Our story

2. 9.8 CVE-2026-111497 (cve.org, opens in a new tab) Exploited

   Google Brotli Unchecked Return Value Vulnerability

   Exploited, added Oct 26 · Our story

3. 9.3 CVE-2026-48356 (cve.org, opens in a new tab) Exploited

   Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

   Exploited, added Oct 26

4. 10.0 CVE-2026-120198 (cve.org, opens in a new tab)

   A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117.

   Published Nov 1

5. 9.9 CVE-2026-120197 (cve.org, opens in a new tab)

   A flaw has been found in WAVLINK WL-WN530HG4B M_V260724.

   Published Nov 1

All critical CVEs → Data: NVD (not endorsed by the NVD)