SECUFOCUSNOW
SECUFOCUS NOW · ENGLISH

Security intelligence built for the next operational decision.

Review CVE severity, exploitation probability, known exploitation, affected versions, and remediation evidence without losing the primary-source trail.

Browse CVE intelligenceOpen remediation guides
Source-linked, not source-replacingNVDCISA KEVFIRST EPSSVendor advisories
PRIORITY QUEUE

Known exploitation and high-impact review

View all →
CISA KEVCritical
CVE-2026-63077

JetBrains TeamCity

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CVSS
9.8
EPSS
-
Published
2026.07.28
Review intelligence →
CISA KEVHigh
CVE-2026-34486

Apache Software Foundation Apache Tomcat, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

CVSS
7.5
EPSS
42.6%
Published
2026.04.10
Review intelligence →
CISA KEVHigh
CVE-2026-18556

N-able N-central

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

CVSS
8.2
EPSS
-
Published
2026.08.02
Review intelligence →
CISA KEVCritical
CVE-2026-9198

IBM Langflow OSS, langflow

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments

CVSS
9.8
EPSS
-
Published
2026.07.18
Review intelligence →
REMEDIATION WORKFLOW

From identification to verification

Browse guides →
01

Identify

Confirm the product, installed version, deployment path, and exposure.

02

Prioritize

Use KEV, EPSS, CVSS, and asset criticality as separate decision signals.

03

Remediate

Follow the vendor-supported update or mitigation path and preserve rollback options.

04

Verify

Recheck versions, service health, access paths, logs, and residual indicators.

LATEST CVE RECORDS

Recently published vulnerabilities

Open CVE index →
CVE-2026-66065CVE-2026-66065 — Q00 ouroborosThe CVSS severity warrants an early asset and exposure review.CVE-2026-18737CVE-2026-18737 — shlinkio ShlinkThe CVSS severity warrants an early asset and exposure review.CVE-2026-69185CVE-2026-69185 — socketio socket.ioThe CVSS severity warrants an early asset and exposure review.CVE-2026-48031CVE-2026-48031 — dhax go-baseThe CVSS severity warrants an early asset and exposure review.CVE-2026-47211CVE-2026-47211 — Q00 ouroborosThe CVSS severity warrants an early asset and exposure review.CVE-2026-38447CVE-2026-38447 — Vulnerability advisoryThe CVSS severity warrants an early asset and exposure review.
EDITORIAL BOUNDARY

Evidence and judgment remain separate.

SECUFOCUS NOW links risk signals and source evidence, but does not treat a score as proof of exposure. Verify the affected product, version, configuration, and vendor guidance in your own environment before applying a change.

Read our methodology →