Dashboard
A sample mixed estate, exactly as ChangeSignal showed it on 14 October 2026: 9 actions across 5 platforms, filed from 986 CVEs and the vendors' lifecycle dates.
- Microsoft Windows Serverbuild 10.0.20348.5622
- Microsoft Exchange Serverbuild 15.02.2562.049
- Fortinet FortiOSversion 7.4.12
- VMware ESXibuild 25595708
- Cisco IOS-XEversion 17.15.7
Actively exploited2actions, published in the last 30 days
Open patches6and 3 releases reaching end of support
CVEs filed986under 9 actions
Technologies watched5in this sample estate
Active Exploits
Vulnerabilities confirmed to be exploited in the wild: listed in CISA's KEV catalogue, or marked exploited by the vendor, and published in the last 30 days. Each row's badge says which. Patch these first.- EXPLOITEDKB5126655Microsoft Windows Server977 CVEs · 1 exploited
- KEVCVE-2026-96951Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.Microsoft Windows Server1 CVE · 1 exploited · 1 not version-checked
Critical 1
- UPDATEKB5128895Microsoft Exchange Server6 CVEs
Important 2
- UPDATEKB5129955Microsoft Exchange Server1 CVE
- EOLPlan a move off Microsoft Windows Server 2022 (LTSC) to a supported release. (our summary of the source remediations)Microsoft Windows Server5 findings
Informational 4
- UPDATEThe source published no remediation for this advisory. Review it and decide with your vendor. (our summary of the source remediations)Microsoft Windows Server1 CVE · 8 not version-checked
- UPDATEUpgrade to FortiOS version 8.0.0 or above Upgrade to upcoming FortiOS version 7.6.9 or aboveFortinet FortiOS1 CVE
- EOLPlan a move off Cisco IOS XE 17.15 (LTS) to a supported release. (our summary of the source remediations)Cisco IOS-XE2 findings
- EOLPlan a move off FortiOS 7.4 to a supported release. (our summary of the source remediations)Fortinet FortiOS1 finding
Testing ChangeSignal? Tell us bluntly what's missing for your patch workflow:
How this sample was made
Nothing here was written by hand. On 14 October 2026 the production connectors fetched the sources below; the watchlist above was evaluated by the same code that evaluates a customer's; and the rows are what the dashboard's own queries returned. Of 65,674 records read, 14,944 matched a product here but were ruled out by the pinned version, and were not shown.
- Windows Server 2022, on the September 2026 update: pinned to build 10.0.20348.5622, the fixed build Microsoft published with KB5122882 (September 2026).
- Exchange Server Subscription Edition, on the September 2026 update: pinned to build 15.02.2562.049, the fixed build Microsoft published with KB5121608 (September 2026).
- FortiOS 7.4.12: pinned to 7.4.12, a release Fortinet names in its own CVE records.
- ESXi 8.0 Update 3k: pinned to build 25595708, the fixed build VMware published as ESXi80U3k-25595708.
- Cisco IOS XE 17.15.7: pinned to 17.15.7, a release Cisco names in its own CVE records.
Every version above is checked against the source records before the sample is written, so a finding against it is confirmed or ruled out, not guessed. Where the source itself states no version - CISA’s KEV catalogue never does - the row says “not version-checked” rather than pretend otherwise.
- CISA Known Exploited Vulnerabilities Catalog: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json fetched 2026-10-14 14:54 UTC · sha256
136904f12e4c6762… - CVE Program (CNA-authored vendor advisory data): https://www.cve.org/CVERecord?id=CVE-2026-106175 fetched 2026-10-14 14:56 UTC · sha256
8f9288f02cbd34cc… - endoflife.date: https://endoflife.date/api/v1/products/cisco-ios-xe fetched 2026-10-14 14:54 UTC · sha256
bfffcfc194401b0c… - endoflife.date: https://endoflife.date/api/v1/products/fortios fetched 2026-10-14 14:54 UTC · sha256
eb92e37855c1beaf… - endoflife.date: https://endoflife.date/api/v1/products/windows-server fetched 2026-10-14 14:54 UTC · sha256
d18590f954d7d2d9… - Microsoft Security Response Center (Security Update Guide): https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Oct fetched 2026-10-14 14:53 UTC · sha256
136a00a62ca73361…