Ranked vulnerability data and company research reports, from public sources.

Each result links to its public source and shows the date it was retrieved.

The two products

Vulnerability Management

Ranks vulnerabilities by exploitation signals, EPSS and CVSS.

Due Diligence Reporting

Researches a company from public sources and reports what it found.

$29.99 per report.

Vulnerability data as of 16 Oct 09:56 UTC

Newly added to CISA KEV

7added to CISA KEV in the last 7 days

  • CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
  • CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability
  • CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability

Latest 3 of 7 shown.

Open the priority feed

Patch Tuesday

1455CVEs in Microsoft's October 2026 release

Excludes 589 CVEs republished for Azure Linux and Chromium-based products in the same release.

  • 89 Criticalrated by Microsoft
  • 1 Exploitedalready in CISA KEV
  • 71 Critical RCEcritical and remote code execution
Open the release

These figures are what the sources have published. They do not show that anything is exposed in your environment.

Data last checked 16 Oct 09:56 UTC. Sources: CISA KEV, FIRST EPSS, Microsoft MSRC; CVSS scores from NIST NVD, CVE.org and vendor advisories; EVULNABLE's own scoring.

  • CISA KEV 16 Oct 15:57 UTC · every 6 h
  • Microsoft 16 Oct 15:57 UTC · every 6 h
  • FIRST EPSS 16 Oct 09:56 UTC · every 12 h
  • NVD looked up per CVE, results kept up to 12 h

How each product works

Vulnerability Management: exposure found, ranked, remediated, then verified.

Find Rank Fix Prove

Due Diligence Reporting: entity resolved, researched, evidence graded, gaps disclosed.

Resolve Research Grade Disclose

Approach

▥

No vendor pays for placement

Not affiliated with, sponsored by, or paid by any vendor it covers.

⚡

The scoring method is published

How the score is built.