Emerging BETA · EXPERIMENTAL RSS ↗
Emerging is a BETA feed that watches a curated set of trusted security-news outlets and links what they report to the 650 products IsItPatched tracks — often ahead of full NVD enrichment. Every item is attributed to its source and links out; IsItPatched never asserts its own findings here. Right now it surfaces 120 machine-linked reports, 17 describing active exploitation.
⚠ Items are machine-linked third-party reporting and may be wrong. Each shows its source and links out — we never assert our own findings here. Treat low-confidence items as leads, and always verify against the source and the vendor advisory.
120
linked reports · last 45 days
17
describing active exploitation
108
CVEs referenced
See news about the software you run Add your products to My Stack and Emerging flags reporting that hits them — a violet node on the graph, “you run this” on the feed.
Open My Stack → Sign in free → Thursday 8 October
High-severity Nvidia bug could crash GPU monitoring on exposed servers
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
No items match.
Unlock the full newsroom — free 115 more linked reports, the live Connections graph, filters, and “you run this” flags on software in your stack.
Sign in free → or RSS ↗ CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability
CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability
CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Microsoft Teams to get support for third-party deepfake detection tools
Grid Protection Alliance openPDC and openHistorian
Chromium: CVE-2025-11215 Off by one error in V8
Chromium: CVE-2025-11219 Use after free in V8
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
Cisco NX-OS Software Python Sandbox Escape Vulnerability
Cisco Finesse Server-Side Request Forgery Vulnerability
Cisco NX-OS Software Control Plane Denial of Service Vulnerability
Cisco NX-OS Software Security Hardening Release: October 2026
Microsoft Outlook to block MSIX attachments starting November
CVE-2026-69436 Windows State Repository Service Elevation of Privilege Vulnerability
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
SVD-2026-1004: Security Vulnerability in Splunk MCP Server - September/October 2026
SVD-2026-1003: Third-Party Package Updates in Splunk Enterprise - September/October 2026
SVD-2026-1002: Security Hardening in Splunk Enterprise - September/October 2026
SVD-2026-1001: Security Vulnerabilities in Splunk Enterprise - September/October 2026
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Microsoft extends the Outlook naughty step with two more file types
Johnson Controls EasyIO FG
Savannah lwIP SMTP client
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
Citrix NetScaler security snafus get even worse amid more 0-day reports
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Debian's latest kernel security update has 1,313 reasons to patch
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
CISA Adds One Known Exploited Vulnerability to Catalog
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
Cisco IOS XE Software Security Hardening Release: August 2026
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Fortinet sounds the alarm over actively exploited FortiMail zero-day
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1
Meari IoT Cloud Platform OpenAPI Service
Johnson Controls EasyIO Neo Series EC and CW Controllers
Armatura LLC Armatura One
Monta monta.app
ABB Protection and Control IED Manager PCM600
ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
Anjvision YSSD-RTMP-H5
Viidure Dashcam Android Application
VIVOTEK Camera Firmware
MikroTik RouterOS
Toptech TMS7 and TopHAT
Baicells Nova 430H
Lantronix G520 Series Cellular Gateway
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
CISA BOD 26-04 Timelines for Three Linux Kernel CVEs
CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM
ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability
ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
ZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability
ZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
ZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
ZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
GitLab Critical Patch Release: 19.0.9, 18.11.12
GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7
Windows Exploitation Techniques: Dangling COM Object Registrations
Cisco IOS XR Software Security Hardening Release: September 2026
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco Identity Services Engine Information Disclosure Vulnerability
Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities
Cisco Identity Services Engine Hardening Release: September 2026
Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
Cisco Identity Services Engine Command Injection Vulnerabilities
Cisco Identity Services Engine Authentication Bypass Vulnerability
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
Metasploit Wrap Up: This One Goes to Sixteen!
GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM)
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)
How this week’s reporting connects — 23 products, 42 CVEs and 15 sources. Lines are attributed links from the items above; positions are illustrative. Tap a node to open it. Violet = software in your stack.
In your stack Product CVE CVE (exploited) Source
Prefer the list? Switch back to . The graph is a visual aid; the timeline above carries every item with full attribution.
About this BETA
Emerging ingests only a hard-coded allow-list of trusted outlets — first-party vendor advisories (Microsoft MSRC, Cisco PSIRT, Fortinet, Palo Alto, Ivanti), security research (Google Project Zero, Rapid7, Qualys) and established reporting (CISA, Krebs on Security, BleepingComputer, The Hacker News, SecurityWeek, Dark Reading, The Register) — no open-web crawl, no social feeds, no user submissions. We store and show only a headline, the source, the time, an outbound link and (where available) a short own-words takeaway — never article text. Links between a report and a product or CVE are made by software and carry a confidence level; they can be wrong. This is an early experiment in linking breaking reporting to the software you actually run — tell us when we get a link wrong →.
Newest first · refreshes on every sync · sources retain all rights to their reporting. See our disclaimer.