Skip to content
Critical Vulnerabilities in Python Libraries Under

Critical Vulnerabilities in Python Libraries Under

First seen 1 Nov 2026, 04:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 1, 2026 at 04:44 UTC
  • •Four critical CVEs related to Python libraries have been added to CISA's KEV catalog.
  • •CVE-2026-104935 and CVE-2026-102764 are actively exploited vulnerabilities.
  • •Organizations should prioritize patching based on CISA's KEV and EPSS scores.

Recent vulnerabilities in Python libraries have been identified, with four critical CVEs added to CISA's Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-104935 was published on October 13, 2026, and is being actively exploited. CVE-2026-102764 was added to the KEV list on October 16, 2026, with a critical CVSS score of 9.3. Two additional critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were published on October 21 and added to the KEV list on October 26, 2026. These vulnerabilities affect various Python services, and organizations are urged to prioritize remediation based on CISA's guidance. The tools for managing these vulnerabilities include a Python-based tool that integrates CISA KEV status and other risk factors to prioritize fixes effectively.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-10-13
CVE-2026-104935 published
An unauthenticated flaw in Ivanti Connect Secure was disclosed, with active exploitation confirmed.
Shattered
2026-10-15
CVE-2026-102764 published
BeyondTrust Remote Support vulnerability disclosed with a CVSS score of 9.3, added to CISA KEV the next day.
Shattered
2026-10-21
CVE-2026-109618 and CVE-2026-109619 published
Two critical vulnerabilities in PHP libraries were disclosed, both added to CISA KEV on October 26.
Shattered
2026-10-26
CVE-2026-109618 and CVE-2026-109619 added to CISA KEV
Both vulnerabilities were confirmed to be actively exploited, prompting immediate action for affected organizations.
Shattered

More articles in this cluster (2)

Following this threat?

Track CVE-2026-102764 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2

Common questions

Which CVEs are actively exploited?
CVE-2026-104935, CVE-2026-102764, CVE-2026-109618, and CVE-2026-109619 are confirmed to be exploited.
What should organizations prioritize?
Organizations should prioritize patching vulnerabilities listed in the CISA KEV catalog first.
How can I assess my risk?
Use tools that integrate CISA KEV status and EPSS scores to evaluate your vulnerability exposure.