Latest critical CVEs

1. 10.0 CVE-2026-97229 (cve.org, opens in a new tab) Exploited

   GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

   Exploited, added Oct 28 · Our story

2. 9.8 CVE-2026-111497 (cve.org, opens in a new tab) Exploited

   Google Brotli Unchecked Return Value Vulnerability

   Exploited, added Oct 26 · Our story

3. 9.3 CVE-2026-48356 (cve.org, opens in a new tab) Exploited

   Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

   Exploited, added Oct 26

4. 9.9 CVE-2026-120224 (cve.org, opens in a new tab)

   A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1.

   Published Nov 1

5. 9.1 CVE-2026-120225 (cve.org, opens in a new tab)

   A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1.

   Published Nov 1

All critical CVEs → Data: NVD (not endorsed by the NVD)