Situational awareness for NIS2 and KRITIS

    What do I need to patch today?

    Every day brings more advisories than any team can read. NEOSEC Intel reduces them to what matters: 36 sources, ranked by actual exploitation, enriched with German sources such as BSI and CERT-Bund, mapped to NIS2 and the CRA – in German or English, via browser, API, webhook or RSS.

    Common starting points

    This is the situation.

    The figures refresh every 30 seconds without reloading.Last updated: —.

    397,505

    Known vulnerabilities (CVE)

    From 3.1 million advisories across 36 sources.

    Search all vulnerabilities
    Use the arrow keys to step through the values, Home and End jump to the first or last value.

    3,325

    New entries in 24 hours

    View latest entries
    Use the arrow keys to step through the values, Home and End jump to the first or last value.

    1,758

    Actively exploited (KEV)

    28 additions this month, 8 in the last 24 hours.

    View actively exploited vulnerabilities
    Use the arrow keys to step through the values, Home and End jump to the first or last value.

    36

    Active sources

    OSV, NVD, CVE.org, MSRC, Red Hat, Fortinet and 30 more.

    Sources and methodologyMap of all sources
    Use the arrow keys to step through the values, Home and End jump to the first or last value.

    How to get the picture.

    Depending on what you have planned today: preparing for Patch Tuesday, checking your plants or understanding who is attacking right now.

    • Patch day

      All Microsoft, Adobe and SAP advisories of the month, ordered by urgency. October 2026: 1,460 entries, 1 of them actively exploited.

      Open the October Patch Tuesday

    • OT and industrial control

      Siemens, Schneider, Phoenix Contact, CERT@VDE and CISA ICS in one view – for municipal utilities, grid operators and manufacturing.

      View OT advisories

    • Who is attacking

      Threat actors, campaigns and ransomware groups with the vulnerabilities they demonstrably exploit. Linked to MITRE ATT&CK.

      View threat actors

    Built for admins, readable for managing directors.

    Every entry explains in two sentences what is affected and what to do. Below that, the evidence: CVSS, EPSS, exploitation status, vendor advisory and the NIS2 classification. No sign-up, no data sharing.

    Search vulnerabilitiesAPI and feeds
    German first
    Summary, impact and remediation in German – the English source one click away.
    Priority, not panic
    The XIEM Effective CVSS weights exploitation, exploit availability and prevalence in German networks.
    NIS2 and CRA mapped
    Which entries are reportable and which manufacturer obligations apply – documented transparently.
    Openly usable
    Search, catalogue and situational picture without an account. Alerting, watchlists and SBOM matching in XIEM® Central.