Daily briefingMonday, 9 November 2026

223 new vulnerabilities, 21 rated critical

In this window the pipeline published 223 vulnerabilities from NVD, GitHub Security Advisories and OSV. By CVSS severity: 21 critical, 67 high, 121 medium, 14 low.

Computed from source dataWindow 8 Nov 07:10 – 9 Nov 07:10 CET

Full briefing Explore this week

New

223

Vulnerabilities in this window

Critical

CVSS 9.0 – 10.0

High

CVSS 7.0 – 8.9

Exploited

Newly added to CISA KEV

Severity mix

Critical
High
Medium
Low
Unrated

9%30%54%

How severity is assigned →

02Most important developments

VerifiedRanked by confirmed exploitation, severity and EPSS.

03Latest discoveries

Open explorer

04Thirty-day activity

All statistics

Published per day

New vulnerabilities by severity, Stockholm calendar days.

Critical
High
Medium
Low
Unrated

Vulnerabilities published per day by severity
Day	Critical	High	Medium	Low	Unrated	Exploited	Total
9 Nov 2026	4	9	16	1	0	0	30
8 Nov 2026	20	91	169	29	0	0	309
7 Nov 2026	68	149	240	9	17	0	483
6 Nov 2026	40	145	216	44	28	1	473
5 Nov 2026	45	182	138	21	138	0	524
4 Nov 2026	41	159	169	33	54	0	456
3 Nov 2026	58	239	288	35	66	1	686
2 Nov 2026	29	191	142	13	18	0	393
1 Nov 2026	0	0	0	0	0	0	0
31 Oct 2026	0	1	0	0	0	1	1
30 Oct 2026	0	2	1	0	0	0	3
29 Oct 2026	0	1	1	0	0	0	2
28 Oct 2026	0	1	0	0	0	1	1
27 Oct 2026	0	2	0	0	0	0	2
26 Oct 2026	0	0	0	0	0	0	0
25 Oct 2026	0	0	0	0	0	0	0
24 Oct 2026	0	0	0	0	0	0	0
23 Oct 2026	0	0	0	0	0	0	0
22 Oct 2026	2	0	0	0	0	2	2
21 Oct 2026	1	1	0	0	0	2	2
20 Oct 2026	0	0	0	0	0	0	0
19 Oct 2026	0	1	1	2	0	0	4
18 Oct 2026	0	0	0	0	0	0	0
17 Oct 2026	0	0	0	0	0	0	0
16 Oct 2026	0	0	0	0	0	0	0
15 Oct 2026	1	1	1	0	0	3	3
14 Oct 2026	2	2	1	3	0	4	8
13 Oct 2026	1	2	0	0	0	3	3
12 Oct 2026	0	0	0	0	0	0	0
11 Oct 2026	0	0	0	0	0	0	0

Last 30 days: 3,385
Critical: 312
High: 1,179
Exploited: 18
Daily average: 419.3

Busiest day: 3 Nov 2026 with 686 published.

05Confirmed exploited

All exploited

Latest additions to CISA's Known Exploited Vulnerabilities catalog: vulnerabilities with reliable evidence of active exploitation. These are the ones to patch first.

06Previous briefings

Full archive

07How the briefing is made

Methodology

0107:00CollectEvery morning at 07:00 Stockholm time, NVD, GitHub Security Advisories, OSV, CISA KEV and FIRST EPSS are queried through their official APIs.
02VerifyRecords are validated, normalized and merged by CVE and advisory identifiers. Nothing is invented or inferred.
03EnrichCVSS severity, EPSS exploitation probability and confirmed exploitation from CISA KEV are attached to each vulnerability.
04ExplainClaude writes plain-language and technical analysis from the verified record only, and is checked against it.
05PublishThe briefing goes live and stays online even if a later run fails. Every fact links back to its source.