vulnerability-management Actively exploited CVEs and flaws, November 2026: 10 to fix Ten exposures attackers are already using: CVEs, a supply-chain compromise with no CVE, and misconfigurations, each with the check and the fix.
