Issue archive

Every issue

Every Gridwatch Brief, newest first. Each brief cites the KEV catalog version and EPSS score date it was built from. Search by CVE ID, vendor, product or keyword.

  • #1 · October 27, 2026 · 10 new KEV entries
    PHP2Shell tops 10 new exploited vulns; CISA's PHP deadline is Thursday

    PHP2Shell is being rapidly weaponized: code execution confirmed on honeypots, and Palo Alto now reports very limited exploitation of PAN-OS management interfaces. Plus Nextcloud's Collabora app, a WAF flaw, the Plex2Shell chain, Arista VeloCloud and Siemens Software Center.

    CVEs: CVE-2026-109619, CVE-2026-109618, CVE-2026-110447, CVE-2026-106931, CVE-2026-96654, CVE-2026-96656, CVE-2026-114625, CVE-2026-96652, CVE-2026-96655, CVE-2026-110936, CVE-2026-8037, CVE-2015-5477, CVE-2015-3306, CVE-2026-21589, CVE-2026-72898

    Products: PHP Group PHP, Collabora Online – Built-in CODE Server, EG Secure Solutions SiteGuard Server Edition, Plex Media Server, Arista VeloCloud Orchestrator, Siemens Software Center, Progress LoadMaster, ISC BIND, ProFTPD, Atlassian Multiple Products, Metabase