4 actively exploited, 37 under review, 1 early warning—routine week

November 9, 2026 · covering 2026-11-02 to 2026-11-09 (through 06:30 ET)

Four vulnerabilities are actively exploited and require immediate action: WordPress Core (remote code execution), SonicOS SSLVPN (MFA bypass), Safari (post-compromise escalation), and Ivanti Connect Secure (authenticated file write). The WordPress and SonicOS flaws are entry points on internet-facing systems; the Safari and Ivanti issues are lower-risk but listed in CISA’s Known Exploited Vulnerabilities catalogue. Beyond these four, the week is routine: 37 high-CVSS items under review lack exploitation signals, and most do not warrant emergency response.

275 records lack enrichment; most are awaiting vendor or source analysis and do not change the week’s prioritisation.

New KEV additions this week

Added to CISA’s Known Exploited Vulnerabilities catalog during this window, whatever the
published date. Entries an earlier brief already shipped reappear here because the KEV listing itself is new.

Complete data — all vulnerabilities new or updated this week

Sorted by Quatronics priority score. Threat, Reach and Effort are the three axes behind it.
Effort is inverted: 100 means the fix is trivial.