Home / News / FlowPro NG / FlowPro NG 2.0: critical vulnerabilities under control
FlowPro NG 2.0: critical vulnerabilities under control
Early November brought several critical vulnerabilities in a single week. That is why we accelerated the release of FlowPro NG 2.0, the biggest FlowPro update so far, which shows within an hour which new vulnerabilities affect your devices and which of them attackers already exploit.
What is happening in security
Between 2 and 5 November 2026, 1,608 new vulnerabilities were published in the NVD database, 128 of them critical. At the same time, the US agency CISA added two more vulnerabilities to its catalogue of actively exploited flaws (CISA KEV). The most serious include:
- WordPress Core, remote code execution (CVE-2026-119977): versions 4.7 to 7.1.3, already on the CISA KEV list with a remediation deadline of 6 November.
- Barracuda Email Security Gateway (CVE-2026-116606, CVSS 9.3): authentication bypass and import of a crafted configuration, fixed in 9.4.0.030.
- Kamailio, ims_registrar_pcscf module (CVE-2026-106803, CVSS 9.8): stack overflow triggered by a crafted SIP NOTIFY message, relevant for VoIP and IMS operators.
- SUSE Rancher (CVE-2026-88811, CVE-2026-94290, CVSS 9.1): credential leaks and abuse of kubeconfig secrets.
- libpng and media libraries (CVE-2026-58936 and others, CVSS 9.8): use-after-free bugs leading to remote code execution.
- Routers and network devices: home and SOHO routers (Linksys, Qihoo 360) with flaws rated 10.0.
The time between a vulnerability being published and being exploited has shrunk to hours. Artificial intelligence helps attackers find and weaponise bugs faster than ever, so you cannot wait for a monthly patch cycle. Patch everything on the CISA KEV list first, then flaws with a high EPSS score, and check your e-mail gateways, VPN and remote access servers.
How FlowPro NG 2.0 tracks vulnerabilities
- Local CVE database: a complete copy of the NVD database (400,000+ vulnerabilities) on your own server, refreshed every hour.
- CISA KEV: vulnerabilities with proof of real-world exploitation are clearly flagged, including the remediation deadline.
- EPSS: every CVE gets a daily score from FIRST, the probability of exploitation in the next 30 days.
- CVE ↔ Assets: vulnerabilities are matched to your devices by exact version ranges and software inventory, with priority and an SLA deadline.
- Watchlist and alerts: a new critical or KEV vulnerability in your products sends an alert by e-mail, Slack, Teams, ntfy or Telegram.
- External Scan: our FlowPro Scanner checks your public IP addresses – the view an attacker has of your network. No Shodan account needed.
- Remediation status and reporting: open, in progress, resolved or accepted risk for every CVE and device, plus a PDF report for management and NIS2 auditors.
Everything runs on your own server; your device list and its vulnerabilities never leave your network. More on the vulnerability management page.
What else is new in version 2.0
- AI triage with evidence: a local LLM reviews logs from all sources, cites the exact log lines behind each finding and groups findings into cases.
- File Integrity Monitoring: changes to system files, configuration and binaries, with ready-made policies for NIS2, CIS, PCI DSS and Windows.
- Active Directory: users, computers, groups and GPOs over LDAPS, 27 audit checks and change tracking.
- Network device discovery: new devices found passively from NetFlow, DNS and TLS fingerprints, with no scanning and no agents.
- NIS2 incident register: NIS2 Article 23 deadlines (24 h, 72 h, 1 month) tracked for every incident.
- Passkeys and admin audit: passwordless sign-in, enforced MFA and a record of every administrator change.
- Less noise: one event per attacker or incident instead of hundreds of duplicates.
In beta: Windows Event Log dashboards and AI Security, which finds AI services in your network and detects prompt-injection attacks.
In development: Penetration Testing module
Monitoring tells you what is happening. The next step is to check how your network holds up against a real attack. We are working on a Penetration Testing module that will let you test your own infrastructure from inside FlowPro NG – safely, only against addresses you register and with your approval. Every finding will be linked to the vulnerability database, the affected devices and your remediation plan.
Want to join the beta? Write to us at sales@net-service.cz.
Try FlowPro NG 2.0
The 14-day Enterprise trial unlocks every module, including the beta ones. You install it on your own server, no credit card needed: start free trial. Existing customers receive version 2.0 as a regular update. For a weekly overview of vulnerabilities and attacks, follow our Security news.