Threat+Constellation
Live— UTC
← Incidents
INCIDENT 444Exploited vulnerabilityLOW / UNDER REVIEWSourced

CVE-2026-81963 added to CISA KEV: Microsoft Windows Link Following Vulnerability

<p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. &nbsp;</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-75650" target="_blank">CVE-2026-75650</a> Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-81963" target="_blank">CVE-2026-81963</a> Microsoft Windows Link Following Vulnerability &nbsp;</li>…

Last evidence update
13 OCT 2026 · 12:00 UTC
Source count
5
Status
reported
United StatesGovernmentCVE-2026-81963CVE-2026-85880CVE-2026-75650CVE-2026-86218CVE-2026-96951CVE-2026-104935
Observation history

How this record has evolved as evidence accumulated.

09 SEP · 05:22 UTC
Initial report
09 SEP · 05:22 UTC
Second independent source
09 SEP · 05:22 UTC
Related CVE identified (CVE-2026-85880)
09 SEP · 05:22 UTC
Second independent source
09 SEP · 05:22 UTC
Summary updated from new evidence
09 SEP · 05:22 UTC
Related CVE identified (CVE-2026-86218)
14 OCT · 05:00 UTC
Second independent source
14 OCT · 05:00 UTC
Related CVE identified (CVE-2026-96951)
14 OCT · 05:00 UTC
Second independent source
14 OCT · 05:00 UTC
Related CVE identified (CVE-2026-104935)
Evidence
CISA KEV · high
CVE-2026-81963 added to CISA KEV: Microsoft Windows Link Following Vulnerability
CISA KEV · high
CVE-2026-85880 added to CISA KEV: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CISA · high
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA KEV · high
CVE-2026-96951 added to CISA KEV: Microsoft Windows Command Injection Vulnerability
CISA · high
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Related incidents
INCIDENT 904 · CVE-2026-104935 added to CISA KEV: Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityINCIDENT 445 · CVE-2026-86218 added to CISA KEV: N-able N-central Static Code Injection VulnerabilityINCIDENT 443 · CVE-2026-75650 added to CISA KEV: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability