What's getting pwned right now

Craft CMS

Craft CMS published four security advisories fixed in 4.18.9 and 5.11.2 (and 5.11.2-only for one). CVE-2026-123488 is an unauthenticated SQL injection in the element search endpoint (CVSS 9.8) that lets remote attackers read/write the database and escalate to admin. CVE-2026-123491 is unauthenticated GraphQL eager-load SQLi (8.2). CVE-2026-123489 is control-panel blind SQLi via getNext/getPrev (7.1). CVE-2026-123490 is authenticated privilege escalation via getOwners() sandbox criteria (8.8, Craft 5.8.17–before 5.11.2). On Nov 8, CVE ids were also published for six more Craft 5 advisories fixed in 5.11.2: CVE-2026-124430 lets non-admin control-panel users use the app/render-elements endpoint as a signing oracle for Twig templates and run OS commands (Craft 5.10.0 and later, CVSS 8.8); CVE-2026-124427 lets anonymous GraphQL clients read entries from sections outside their schema scope via prev/next fields; CVE-2026-124429 lets public registrants reclaim deactivated accounts and their permissions when email verification is off; the rest are a GraphQL Sites-scope bypass, an SVG file read and a volume-browsing bypass. Upgrade to 4.18.9 or 5.11.2.

Kyverno (Kubernetes policy engine)

Kyverno, the Kubernetes policy engine, fixed 24 security advisories (9 critical, 14 high, 1 moderate) in v1.19.2, released Oct 20; the CVE ids were published Nov 5. The worst bugs, rated CVSS 9.9 by the maintainers, let a user who can only create a policy in their own namespace escape it: an apiCall urlPath that hides ../ behind a ? or # separator (CVE-2026-122310, an incomplete fix of an earlier bug), CEL resource arguments and CleanupPolicy context loaders that reach other namespaces (CVE-2026-122311, CVE-2026-122304), and NamespacedMutatingPolicy mutateExisting targets that overwrite resources anywhere (CVE-2026-122303, CVE-2026-122313). Requests run as Kyverno's own ServiceAccount, which can create webhook configurations, so the maintainers say this reaches cluster admin. Other fixes cover image verification bypasses (a forged annotation, an attestation-type panic, a signature cache bypass, cosign keyless checks passing with empty SAN certificates), PolicyException and generate-rule bypasses, and several denial-of-service bugs. Multi-tenant clusters where tenants can write namespaced Kyverno policies are most at risk. Two more critical advisories fixed in 1.19.2, published Oct 23 and given CVE ids on Nov 8, cover a malformed percent-escape bypass of the 1.19.1 apiCall namespace clamp that again reaches cluster admin (CVE-2026-124440, affects 1.19.1) and generate rules that skip authorization when the target kind or namespace is a variable (CVE-2026-124441). Upgrade to 1.19.2 (Helm chart 3.9.2). No exploitation reported.

Contact Form 7 (WordPress plugin)

Contact Form 7, a WordPress form plugin with more than 10 million active installs, did not validate the type or extension of files uploaded through a form file field in versions 6.2 through 6.2.3, and a flaw in its temporary-file cleanup left the uploaded file on disk. Unauthenticated visitors can therefore upload arbitrary files to any site using a form with a file field. Per WPScan, on a stock Debian or Ubuntu Apache configuration, which lists directory contents and maps .phar to the PHP handler, the stored file can be located and executed, leading to remote code execution; on other setups (nginx, or Apache with .htaccess overrides) it is limited to an arbitrary file in the uploads directory that may still be served as active content such as HTML or SVG from the site's own origin. The plugin's author fixed it in 6.2.4 on Oct 29 (with 6.2.4.1 the same day), switching file names to an extension safelist. WPScan published CVE-2026-114432 on Nov 8 and will release its proof of concept on Nov 19. Only the 6.2–6.2.3 releases are affected. No exploitation has been reported.

Control Web Panel (CWP, formerly CentOS Web Panel)

On Nov 3 2026 VulnCheck disclosed ten vulnerabilities in Control Web Panel (CWP, formerly CentOS Web Panel) that chain from an unauthenticated request to a root shell. The CWP user panel (port 2083) sends its login redirect without stopping execution (CVE-2026-73696), so an attacker-named module file is included before login (path traversal, CVE-2026-73695); the phpini_editor and protected_directory modules then give file write and command execution as the hosting user (CVE-2026-73697, CVE-2026-77876). From that foothold, the root-owned loopback user API on 127.0.0.1:2302 has ungated routes (CVE-2026-77877), root command injections in /v1/restoredatabase/, /v1/newpass/ and /v1/valid_token/ (CVE-2026-77878, CVE-2026-77880, CVE-2026-104080) and SQL injections in its access_token() gate and dashboard route (CVE-2026-77879, CVE-2026-77881). The only precondition is one valid hosting account name, which the panel confirms (302 vs 404). CWP fixed the bugs in stages without naming CVEs: 1.12 closed the pre-auth entry, 1.16 fixed the user-panel modules, and 1.27/1.29 (Oct 30-31) fixed the user API; all ten are fixed in 1.29. VulnCheck counts tens of thousands of internet-exposed CWP panels. No in-the-wild exploitation reported yet, but the previous CWP user-panel RCE (CVE-2025-48703) was mass-exploited and is in CISA KEV.

UnrealIRCd

UnrealIRCd released 6.2.7.1 and a no-restart hot-patch (bundle-20261107) on Nov 7 2026 fixing 9 security issues found in an AI-assisted internal audit. The critical one, CVE-2026-114713, is in the labeled-response module, which does not escape the IRCv3 "label" message tag when echoing it into replies; on a network with two or more linked servers any ordinary user can inject server-to-server commands that run with server or IRCOp authority (KILL, GLINE and more). Maintainer Syzop calls it the most critical issue found in UnrealIRCd in the past 15 years. The other 8 fixes cover two IP-address leaks (including "decloaking" another user), a blacklist-recheck hang, a user-triggerable crash on CHGIDENT from Services, a counting error that can lock out all new connections with "This server is full", no cap on how many bans Services can set (now 2x set::maxbans), a TLS renegotiation flood issue and a possible whowasdb crash. UnrealIRCd 5 (end of life since 2023) is also affected by the critical bug. Apply the SPAMFILTER workaround first, then hot-patch or upgrade.

OpenSSH sshd on Alpine Linux (openssh-server, built without PAM)

Alpine Linux warned that sshd built without PAM can be logged into without a password. On those builds sshd checks a password by running crypt() and comparing the result to the stored password field, borrowing another account's salt when the stored field has none. musl's crypt() returns "*" as an error when the password is longer than 256 bytes, and "*" is exactly what the stored field holds for accounts with no password, so the comparison matches. An attacker who can reach the SSH port and knows the name of such an account can log in with one connection by sending a 257 to 1024 byte password, as long as the machine has at least one other account with a $5$ or $6$ hash. Affected setups are Alpine's openssh-server package (or openssh-server-pam with UsePAM no) with PasswordAuthentication yes, on every release Alpine checked from 3.16 through 3.24 and edge. OpenSSH released 10.6p2 on Nov 5 2026 to avoid the bug in sshd, and Alpine shipped fixed packages for 3.16 to 3.24 and edge. The bug was assigned CVE-2026-123158 later the same day. On Nov 6 2026 Previdian reported successful root access on an Alpine/OpenSSH honeypot within about nine hours of CVE publication (reconnaissance from 89.116.89.18), and watchTowr said it was observing botnet and crypto-miner exploitation.

imgproxy

imgproxy's ICO loader (vips/icoload.c) has three related flaws reachable with a crafted image. GHSA-hff9-5pqw-6w9f is a critical unauthenticated integer overflow: an attacker-controlled 32-bit data_size wraps when BMP_FILE_HEADER_LEN is added, so the process allocates a few bytes then writes far past the buffer — GitHub rates it CVSS 3.1 9.8 and says the heap overflow can cause denial of service or remote code execution. GHSA-mmq5-xm89-9pfg (high, CVSS 7.5) passes the same data_size to VIPS_MALLOC without a bound, so a tiny ICO can force a multi-gigabyte allocation. GHSA-494m-4556-wf5p (high, CVSS 7.5) reconstructs a BMP header from unvalidated fields and can write out of bounds, crashing the worker. Fixed in v4.0.16 (overflow + unbounded alloc) and v4.0.17 (OOB heap R/W). Also tracked as GO-2026-6897, GO-2026-6898 and GO-2026-6895, and since Nov 8 as CVE-2026-123614, CVE-2026-123616 and CVE-2026-123615.

OpenAM (Open Identity Platform)

Open Identity Platform's OpenAM 16.1.4 (Oct 22) fixes 18 security advisories, three of them critical and unauthenticated. GHSA-5c3q-hp86-xjr8 (CVSS 10.0, OpenAM 14.0.0–16.1.3): live session tokens are broadcast on the agent notification WebSocket (enabled by default) and the WebSocket's auth check can be bypassed through a legacy Liberty ID-FF endpoint, so an unauthenticated attacker can passively collect every user's session token, including administrators', and reuse it against OpenAM and every SSO-protected app. GHSA-3j2f-qhrc-rjfj (CVSS 9.8): an OpenAM SAML v2.0 service provider can accept unsigned assertions on some bindings (ECP/PAOS consumer advertised and WantAssertionsSigned off, both generated defaults, plus an SP encryption key), allowing unauthenticated account takeover. GHSA-jv8f-m88g-h6mm (CVSS 9.8): self-registration (off by default) doesn't enforce the allowed attribute list, so an anonymous user can join an administrative group. GHSA-hvfc-4v4r-8p9w: built-in demo, anonymous and WS-Security/STS agent identities ship with publicly known passwords and can log in; the advisory says this was reported as the entry point of a real intrusion against an outdated deployment. Other fixes cover unauthenticated deserialisation DoS, OAuth 2.0 device-flow CSRF and PKCE bypass, SSRF, open redirects and XSS. VulnCheck assigned CVE-2026-123536 through CVE-2026-123553 on Nov 8. Upgrade to 16.1.4.

Microsoft Paint (Microsoft Store app)

CVE-2026-83844 is an out-of-bounds read in Microsoft Paint. Microsoft's CVE record, updated November 7, says it allows an unauthorized attacker to execute code locally and rates it CVSS 3.1 7.0 (AV:L/AC:H/PR:N/UI:R): local, high attack complexity, with user interaction required. Microsoft published the issue on Oct 13 2026 as a Microsoft Store security update, not a Windows Update. The record now lists Paint as affected below 11.2609.401.0, matching MSRC's named fixed build; it had previously listed a lower cutoff (below 11.2605.91.0), which could have let scanners wrongly clear older Store builds. As of Nov 6 2026, The Hacker News and RFF reported that Store catalogs in multiple countries were serving 11.2609.401.0. Admins should inventory every user copy and the provisioned package and update Paint through the Store (or MDM Store-app update scans) to 11.2609.401.0 or later. Earlier coverage, including The Hacker News on November 6, described it as CVSS 8.1 network RCE with no user interaction; Microsoft's current record describes local execution with user interaction. CISA's SSVC assessment from October 13 lists exploitation as none, and it was not in CISA KEV when THN checked Nov 6.

Zyxel GS1900 series switches (10 models) firmware 2.90(...2)C0 and earlier

Zyxel patched CVE-2026-107441, an out-of-bounds write in the CGI web management program of ten GS1900 switch models that lets an unauthenticated attacker who can reach the web interface run OS commands with a crafted HTTP request. GreyNoise saw a threat actor it tracks as Kapibala compromise 996 GS1900 switches in 48 countries from around August 17, stealing configurations, hashed root credentials and network information. That activity was first blamed on CVE-2026-7273 (patched in June, added to CISA KEV on Sep 21), but Binarly found the recovered exploit still worked on all ten firmware releases that fixed CVE-2026-7273, so switches with only that update stayed exposed. Zyxel shipped fixed 2.90(...3)C0 firmware on Oct 22 and published its advisory on Nov 3. Install the 2.90(...3)C0 build for your model, keep the web management interface on a trusted management VLAN, and check switches whose web UI was reachable from other networks for signs of compromise.

Keycloak / Red Hat Build of Keycloak (keycloak-services)

Red Hat disclosed a flaw in Keycloak's SAML HTTP-Redirect binding (keycloak-services): the server accepts percent-encoded parameter names such as %53AMLResponse, while the signature check only looks at the literal parameter names. An unauthenticated attacker can use that mismatch to slip in a crafted, unsigned SAML message that Keycloak processes instead of the legitimately signed one, which leads to full takeover of federated user accounts. Red Hat rates it Important with a CVSS 3.1 score of 9.1 and lists the Red Hat Build of Keycloak as affected; Red Hat Single Sign-On 7 is not affected. Keycloak 26.8.2, released on Nov 5 2026, fixes it (the commit "Verify the SAML redirect binding message that is processed" closes CVE-2026-117691); Red Hat had not listed a fixed Red Hat Build of Keycloak release when the CVE was published. No exploitation has been reported.

Linux kernel (IPv4 TCP)

CVE-2026-98432 is a race-condition use-after-free in the Linux kernel's IPv4 TCP handshake code (ireq_opt/inet_opt freed without an RCU grace period), fixed upstream on Oct 15 and rated 9.8 by the kernel CNA. On Oct 28 Anthropic said an unreleased Claude model turned the bug into a zero-click remote root exploit against servers running a multipath TCP listener (about 48 minutes to defeat KASLR, five more to get a shell). The exploit was built in a lab and is not known to be used in attacks. Update to a fixed stable kernel.

TeamViewer Remote, Tensor and ONE clients and Remote Management add-ons

On October 27 TeamViewer published two bulletins covering nine CVEs. TV-2026-1011 fixes two remote-code-execution bugs in TeamViewer clients rated CVSS 8.8: an out-of-bounds write in the screen-image decoder of the Full Client for Linux and macOS (CVE-2026-92372), reachable through crafted screen-image data in a remote-control session or a crafted .tvs session recording, and an integer overflow in remote-control screen processing in the Full Client, Portable and Android Remote Control app (CVE-2026-111585), triggered by connecting to an attacker-controlled or compromised host. Both need user interaction. It also fixes a macOS privileged-helper race (CVE-2026-92374) that lets a local user install a malicious package and get root. TV-2026-1012 fixes six local privilege escalation bugs (CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584) in the Remote Management Monitoring, Patch Management and Advanced Asset Management add-ons that can give a low-privileged local user SYSTEM or root. TeamViewer rates both bulletins Important and says it is not aware of exploitation in the wild. Update TeamViewer Full Client, Host and Portable to 15.83 (or the patched legacy builds 15.64.10, 14.7.48868 and 13.2.x); the add-on fixes (Monitoring 26.10.1, Patch Management 26.9.1) arrive by auto-update.

Sophos UTM (SG UTM), all versions, with the email proxy and scanning enabled

Sophos published an advisory on Oct 28 for CVE-2026-118633, a path traversal vulnerability in Sophos UTM that lets an unauthenticated remote attacker execute arbitrary commands as root after winning a race condition by sustaining repeated attacks for a few minutes. It is reachable when the UTM email proxy is used with scanning enabled. All Sophos UTM versions are affected (the CVE record lists SG UTM 9.724 and earlier). Sophos UTM is end-of-life, so the fix is not delivered automatically: Sophos says urgent customer action is required, the patch must be installed manually, and customers still using Email Protection on UTM should apply it as soon as possible or move to a supported version of Sophos Firewall. The issue was reported through the Sophos bug bounty program by Sam Pizzey.

Google Chrome (desktop)

Google's Chrome 156 stable release (156.0.8078.47, .48 on some Windows/Mac) fixed 353 security issues, including six critical bugs in Skia, Accessibility, CSS, Paint and WebRTC. On Oct 27 a follow-up update (156.0.8078.73/.74) fixed 52 more, four of them critical (FileSystem, FileAPI, Skia, Layout). On Oct 29 a third update (156.0.8078.79/.80) fixed 21 more, including a critical memory corruption bug in MediaStream (CVE-2026-76024). Google has not said any are exploited. The rollout is staged, so update and relaunch rather than waiting.

Puppet Server / Puppet Enterprise (Perforce) and OpenVox (openvox-agent, openvox-server, openvoxdb)

Puppet by Perforce and the OpenVox fork released coordinated fixes on Nov 3 2026 for two critical bugs found by Neodyme that affect all known Puppet and OpenVox versions, going back at least to open-source Puppet 6.24.0 from July 2021. CVE-2026-115731 lets any client holding a CA-signed agent certificate run arbitrary code on the Puppet/OpenVox server as its service user by submitting a report with a crafted rich-data event, because the event is deserialized into Ruby code. CVE-2026-115732 is a flaw in trapperkeeper-authorization's certificate-name matching that lets a certificate such as evil.target.example.com be authorized as target.example.com, exposing that node's catalog and secrets, and in Puppet Enterprise it can lead to CA administration and commands on managed nodes. Where the CA autosigns certificate requests without strong verification, an unauthenticated attacker can get the certificate both bugs need. Neodyme's writeup shows the server RCE being used to steal the CA signing key and run commands as root on managed agents. Upgrade OpenVox to openvox-agent 8.32.0 or 9.3.0, openvox-server 8.18.0 or 9.2.0 and openvoxdb 8.18.0 or 9.2.0, or Puppet Enterprise to 2023.8.13, 2025.12.1 or 2026.0.1 (Puppet Core 9.1.3, Puppet Server 9.0.24.1), then restart the server. OpenVox says open-source Puppet will not get security updates and recommends migrating.

Kubeflow Pipelines

Kubeflow Pipelines before 2.18.0 does not confine the file path passed to the volume artifact handler (GET /artifacts/get?source=volume) to the selected volume. A caller who can reach the route and names an existing mounted volume can use path traversal to read any file the artifact-serving process can read. The ml-pipeline-ui frontend pod serves the request when artifact proxying is disabled, and the namespace's artifact-service pod serves it when proxying is enabled. Deployments with authentication disabled need no credentials; in multi-user deployments the caller ordinarily must be authorized for the namespace. The CNA scores it CVSS 3.1 7.5 (unauthenticated, network, high confidentiality impact). Fixed in 2.18.0. The same day Kubeflow published three companion CVEs: CVE-2026-118759 (CVSS 7.5, the run log streaming endpoint skips namespace authorization and exposes pod execution logs across tenants, fixed in 2.18.0), CVE-2026-118760 (CVSS 6.5, missing namespace authorization allows cross-tenant artifact reads, fixed in 2.17.0) and CVE-2026-118761 (CVSS 7.5, a pipeline archive upload decompression bomb can exhaust server memory, fixed in 2.18.0).

Wasmtime (Bytecode Alliance) and its Cranelift compiler

Two CVSS 9.9 bugs in Cranelift, the default compiler in the Wasmtime WebAssembly runtime, let a module an attacker controls escape its sandbox. CVE-2026-115889 (all architectures) comes from 24-bit value-number fields that silently overflowed in large functions, causing miscompilation and type confusion; it affects Wasmtime before 36.0.19 and 37.0.0 through 42.x. CVE-2026-115893 (ARM64/aarch64 only) makes a br_table with more than about 256,000 targets jump to the wrong place, letting a module jump to arbitrary code; it affects every line before 36.0.19, 48.0.7 and 49.0.4. Fixes shipped Oct 19 and 20 in 36.0.19, 48.0.7, 49.0.4 and 50.0.0. Wasmtime is often embedded as a library, so every program that bundles it must be rebuilt; services that compile modules from untrusted users are most at risk. No exploitation reported.

JupyterLab Desktop (jupyterlab/jupyterlab-desktop)

NVD published four JupyterLab Desktop CVEs on 2026-11-06 for issues patched in the Jul 22 2026 v4.6.2-1 security release (first Desktop release in two years). Two are critical remote code execution: CVE-2026-102530 (CVSS 9.4) — unsanitized remote-server URLs in the Connect dialog / Welcome view enable XSS that abuses the privileged Electron IPC bridge; and CVE-2026-86044 (CVSS 9.6) — a MathJax link in an untrusted notebook plus a getServerInfo IPC leak lets one click hand the local Jupyter server token to an attacker site for RCE (requires JupyterLab < 4.4.8 in the managed environment). Two medium macOS-only TCC bypasses (CVE-2025-54991 / CVE-2025-55002, CVSS 5.5) need existing local code execution. Affected: Desktop <= v4.2.5-1. Upgrade to 4.6.2-1.

undici (Node.js)

nodejs/undici shipped coordinated security releases 7.30.2 and 8.12.4 on Nov 5 2026 fixing six advisories. High GHSA-mqg3-3v4r-cm32 / CVE-2026-116592 lets an originless Agent with compose(redirect(), cache()) and a shared cache poison or disclose across users because only the final redirect hop was checked, so intermediate hops could bypass the earlier CVE-2026-109829 fix (affected >=7.30.1 <7.30.2 and >=8.12.2 <8.12.4). Five Medium issues in the same release cover same-origin redirect cache disclosure (GHSA-7xg3-fphp-28hg / CVE-2026-120474), cross-origin redirect revalidation disclosure (GHSA-5rm8-gv32-r954 / CVE-2026-116630), array-of-tuples headers bypassing redirect credential stripping (GHSA-9v6h-8rgp-m69f / CVE-2026-120415), unhandled exception DoS during cache-interceptor response replay (GHSA-3g9m-rv3r-w5w2 / CVE-2026-120222), and Subresource Integrity bypass when integrity metadata uses non-space ASCII whitespace such as a tab (GHSA-r4pc-4jcp-7pqc / CVE-2026-120423). Upgrade to undici 7.30.2 or 8.12.4.

Atlantis (Terraform pull request automation)

On October 25 the Atlantis project (the Terraform pull request automation server) released v0.49.0 and published 12 GitHub security advisories fixed in it. The worst, GHSA-6mjf-4m52-m5cq (CVSS 9.8, critical), comes from Atlantis checking only the path of a pull request's clone URL and not its host, while trusting the head repository name from the webhook body: a forged webhook can point Atlantis at an attacker's git server, pass the --allow-fork-prs=false gate and --repo-allowlist, and have Atlantis fetch and plan a Terraform tree the attacker controls. Servers without a GitHub webhook secret accept that forged webhook from anyone without authentication. Other fixes cover a Gitea dismissed-approval bypass of apply_requirements (GHSA-fm5f-jg8p-x2vw, 8.8), an allowed_workflows allow-list bypass in multi-project atlantis.yaml files (GHSA-56q6-8vmp-v2qm, 8.2), a plan-hijack apply-approval bypass (GHSA-5vwh-xc92-8h64), a pull request symlink that makes Terraform run outside the checkout (GHSA-9q39-mgw7-5789), unauthenticated lock metadata on /api/locks (GHSA-xgrg-fpp6-q6fm), timing attacks on Basic Auth and API secrets plus path traversal on /api/plan and /api/apply, an arbitrary file read via --var-file, secrets leaking into PR comments when output hiding errors, and a CSRF in the GitHub App setup callback. The advisories do not mention exploitation. v0.49.0 is a breaking release: GitHub and GHES webhooks whose clone URL host differs from --gh-hostname are now rejected, and the Docker images no longer bundle Terraform or OpenTofu. Anyone upgrading from v0.47.0 or earlier also picks up the v0.47.1 fix for CVE-2026-116676, a PR-controlled workspace name that was passed unquoted into a shell command. Upgrade to 0.49.0 and set a GitHub webhook secret.

npm open package (7.2.0 to 10.x) and apps using it on Windows/WSL, including OpenCode and MCP Inspector

A command-injection flaw in the widely used npm package open (versions 7.2.0 to before 11.0.0) lets a crafted URL run PowerShell code on Windows and WSL: open placed the URL unescaped inside a PowerShell double-quoted string, where $(...) subexpressions execute. Tools that open server-supplied URLs are exposed. A malicious or hijacked remote MCP server can answer with an OAuth authorization endpoint containing a payload, and it runs as soon as the developer connects or signs in. Affected apps named in the CVE record are the OpenCode AI coding agent 1.0.137 to 1.18.32 (fixed in 1.18.33 on Sep 28 without an advisory) and MCP Inspector 2.0.0 to 2.11.0 (fixed in 2.12.0, GHSA-q978-78c7-phqw). open itself fixed the escaping in 11.0.0. VulnCheck assigned CVE-2026-119025 on Oct 29 2026 and rates it High (CVSS 4.0 7.7); Pillar Security, which found it, had proposed 9.8 for OpenCode. macOS and Linux are not affected; no in-the-wild exploitation reported.

TrueNAS SCALE (Community Edition and Enterprise)

TrueNAS says its middleware (middlewared) in TrueNAS SCALE, Community Edition and Enterprise, trusted any API connection whose source address was one of the hardcoded HA heartbeat addresses (169.254.10.1 or 169.254.10.2) and whose source port was 1024 or lower, and handed it an internal node credential that counts as full administrator for every API method. The hook is registered on every install, including single-node Community Edition systems with no HA set up. Admin API access can be used to run commands as root, bypasses the management IP allowlist and rate limiting, and is not recorded in the audit log. It cannot be exploited from the internet: the attacker has to be on the same layer-2 segment as the management interface (for example a VM on the same hypervisor switch or a host on a flat VLAN) and also has to control the return path, since TrueNAS has no route to 169.254.0.0/16. TrueNAS rates it CVSS 3.1 8.3 (high). The fix shipped in TrueNAS SCALE 25.10.8 (Goldeye), released Nov 5 2026; upgrade to 25.10.8 or later. Until upgraded, keep the management interface on a dedicated, trusted network. TrueNAS CORE is not affected. No exploitation has been reported.

SignalWire FreeSWITCH

SignalWire published GitHub advisories for FreeSWITCH, the open-source telephony switch behind FusionPBX and many VoIP platforms. The critical one, CVE-2026-116779 (CVSS 9.8), lets anyone who can get a SIP MESSAGE accepted address it to the api chat proto and have FreeSWITCH run any API command, including system for OS commands and inline Lua where mod_lua is loaded. Inbound chat is on by default, the inbound ACL does not cover MESSAGE, and one registered SIP account (or the stock passwordless default directory user) is enough. The advisory says exploitation has been observed in the wild. It is fixed in 1.11.3 (released Aug 28), which adds an enable-chat-api-proto setting that is off by default. Oct 26 and Oct 28 advisories also cover pre-auth memory bugs in mod_xml_rpc WebSocket handling (CVE-2026-116785, CVSS 9.1), ICE checks accepted without STUN MESSAGE-INTEGRITY (CVE-2026-116790, CVSS 9.1), SIP REFER channel-variable injection leading to command execution (CVE-2026-116786), and overflows in mod_rtmp, MSRP, SDP crypto and the Event Socket, all fixed in 1.11.2. Upgrade to 1.11.3.

Jenkins (core), weekly and LTS

The Jenkins project published a core security advisory on Oct 28 fixing 15 vulnerabilities in Jenkins weekly 2.587 and earlier and LTS 2.580.1 and earlier, 13 rated High and 2 Medium. The most serious: CVE-2026-117612 lets attackers with Overall/Read and a user account (or any config.xml POST permission) instantiate arbitrary types through XStream's resolves-to attribute, potentially leading to remote code execution. CVE-2026-117614 lets users with Agent/Configure run arbitrary code on the controller through unapproved legacy agent launch commands. CVE-2026-117615, CVE-2026-117616 and CVE-2026-117617 allow arbitrary file read, config.xml overwrite and arbitrary file writes on the controller that can lead to code execution. CVE-2026-117618 is a race in the setup wizard that lets unauthenticated attackers create an administrator account while the initial account is being replaced, and CVE-2026-117620 lets Overall/Read users take over accounts through the Manage Old Data feature. The rest are stored XSS, a remember-me cookie that survives API token revocation, and information leaks. All are fixed in Jenkins 2.588 and LTS 2.580.2. Many were reported by the Anthropic OSS program.

Electrum Bitcoin wallet

Electrum before 4.8.3 trusted its server for unconfirmed transactions without checking their signatures. A malicious Electrum server can swallow a transaction the user just broadcast and show a conflicting fake (with invalid signatures) that pays an attacker address ground to match the last four characters of the real one. If the user then bumps the fee with Replace-By-Fee, the wallet signs a valid payment to the attacker. Electrum says some servers are doing this in the wild, and one user lost money. Upgrade to Electrum 4.8.3; until then, check every output address and amount before signing, including fee bumps. Users connecting only to a server they run or trust are not affected.

Echo (github.com/labstack/echo) Proxy middleware

Echo's Proxy middleware opened a raw tunnel as soon as a client asked for a WebSocket upgrade, before checking whether the upstream accepted it. If the upstream answered with an ordinary HTTP response and kept the connection alive, later HTTP requests on that connection went straight to the upstream without passing through Echo's router or route-specific middleware, which can bypass authentication or authorization enforced only at Echo's routes. It needs an accessible proxy route, an upstream that rejects the upgrade without closing the connection, and a target resource on that upstream without its own authorization. It affects the v4 and v5 release lines; upgrade to v4.16.1 or v5.4.1. GitHub rates it critical (CVSS 4.0 9.1), and it is tracked as CVE-2026-118264.

Drupal core (Field UI module)

A remote code execution vulnerability exists in the Field UI module in Drupal core. It isn't directly exploitable with core alone, but the Drupal Security Team says multiple serious exploit paths exist with contributed modules, at least one without authentication, and custom code may also expose it. Rated Critical (19/25). Update to Drupal 11.4.10, 11.3.19 or 10.6.19; uninstalling the core Field UI module (field_ui) mitigates it until then.

Embedthis GoAhead embedded web server

Embedthis GoAhead, the embedded web server behind device-management pages on many IoT, firewall and OT products, fixed eleven advisories in 6.1.1. The critical ones: a Basic and form-auth bypass for users with BF1 (Blowfish) stored hashes where any password works (6.1.0, CVE-2026-115888), OpenSSL builds that load a CRL but never enforce it so revoked mTLS client certificates are still accepted (3.4.5 to 6.1.0, CVE-2026-115881), and Windows CGI command injection through .bat/.cmd scripts run via cmd.exe. Others include mTLS chain-depth bypass on LibreSSL legacy-verifier builds (CVE-2026-115884), httpoxy-style CGI HTTP_PROXY injection (CVE-2026-115882), CGI ISINDEX option injection (CVE-2026-115880), a 1-byte DH modulus on Mbed TLS builds that makes TLS 1.2 DHE_RSA sessions decryptable, request smuggling, and session fixation. The advisories went out Oct 12; FoxIO's Oct 26 write-up on the three TLS bugs drew wide attention. Upgrade to 6.1.1; devices only get the fix when their manufacturer ships new firmware.

Google Chrome (desktop)

Google promoted Chrome 157 to the stable channel on Nov 3 2026 (157.0.8103.38 on Linux, 157.0.8103.38/.39 on Windows and Mac) with 213 security fixes. Seven are rated critical: buffer overflows in Dawn (CVE-2026-121156, CVE-2026-121247), memory corruption in ANGLE (CVE-2026-121229), and use-after-free bugs in WebGL (CVE-2026-121246), Prerender (CVE-2026-121035), Geometry (CVE-2026-121203) and Core (CVE-2026-121126). Many of the high-severity bugs were credited to AI-assisted research from Anthropic and OpenAI Codex Security. Google has not said any are exploited. The rollout is staged over days or weeks, so update and relaunch rather than waiting.

ZITADEL

ZITADEL published three account takeover advisories for its Login V2 UI, with CVE records on Oct 29 2026. CVE-2026-119127 (CVSS 4.0 8.6) is a host header injection: unauthenticated attackers who know a victim's login name can poison password-reset, invite and email-verification links via the x-zitadel-public-host, x-zitadel-forward-host or x-forwarded-host headers, harvest the single-use codes and take over accounts, including instance administrators. CVE-2026-119128 (CVSS 4.0 9.1) lets unauthenticated attackers compute a valid verificationCheck cookie from the user ID and browser fingerprint and set the first credential (password, passkey or linked identity provider) of users that have no authentication method yet. CVE-2026-119129 (CVSS 4.0 8.6) is missing authorization in OAuth 2.0 device authorization: a signed-in user who opens a link carrying the attacker's user code hands over their tokens, and project access settings can be bypassed via the OIDC device authorization API. 4.0.0 before 4.19.5 is affected by all three; 3.0.0 through 3.4.15 is also affected by the device authorization bug.

Pillow (Python imaging library)

A heap buffer overflow in Pillow's FlashPix (FPX) JPEG-tile decoder lets an attacker run code by getting an application to open a single crafted file with Image.open(). Pillow detects FPX files by their OLE2 content, not their extension, so any service that opens or thumbnails untrusted uploads with the optional olefile package installed can be hit with no user interaction. The advisory includes a working proof of concept (shown on Pillow 12.2.0 with ASLR disabled). Pillow 12.3.0 and earlier are affected; upgrade to 13.0.0. GitHub rates it critical (CVSS 4.0 score 9.2). The same 13.0.0 release (Oct 16) also fixes other critical bugs: CVE-2026-112900, where an EPS filename starting with - or @ is passed to Ghostscript as an option and can lead to code execution (2.6.0 through 12.3.0); CVE-2026-112393, a heap overflow when saving TIFF to BytesIO (public reproducer); and CVE-2026-112403, a JPEG heap overflow with draft()/thumbnail() on libjpeg-turbo 3.x builds.

Okta Access Gateway (on-prem appliance)

Okta fixed two Okta Access Gateway (OAG) bugs on Oct 22. CVE-2026-115547 (CVSS 9.1) lets an authenticated administrator run system commands as the OAG service account through specially formatted configuration values. CVE-2026-115546 (CVSS 8.1) lets any user with a valid session change the authentication-source parameter during sign-on and get a SAML assertion for the Admin Console. Combined, a regular gateway user could potentially reach command execution. Both are fixed in 2026.10.2. OAG also bundles a PHP runtime hit by PHP2Shell, fixed in 2026.44.0 (released Oct 23). Okta's cloud services are not affected.

iTerm2 (macOS terminal)

iTerm2, the popular macOS terminal, has an argument injection bug in its x-man-page: URL handler in versions before 3.7.7beta2. Per the CVE record, percent-encoded NUL characters survive iTerm2s input sanitization and are later turned into whitespace, so a crafted link can inject extra arguments into /usr/bin/man, including -P to pick an attacker-controlled pager command that runs with the users privileges. The victim has to open the crafted URL in iTerm2, for example by clicking it in a browser where iTerm2 handles the x-man-page scheme (a browser or macOS confirmation may appear) or in terminal output. The record notes it exists because of an incomplete fix for CVE-2023-46321. The fix landed in 3.7.7beta2, and stable iTerm2 3.7.7 (built Nov 3 2026) now checks man section and page names against a character allowlist; the release notes credit vin01 for finding it. The CVE record rates it CVSS 4.0 8.7 (high). No exploitation has been reported.

Better Auth (@better-auth/expo, better-auth on npm)

Better Auth, a popular TypeScript authentication library, published a critical advisory on Nov 3 2026 for its expo() server plugin. The plugin's public /expo-authorization-proxy endpoint signed a caller-supplied state value with the application secret without checking that the server had issued it. Because Better Auth uses the same secret for email verification links and the session cookie cache, an unauthenticated attacker who knows a user's email address can sign in as that user and change the account's email, and with the cookie cache enabled, an attacker who knows a user ID can act as that user. The same endpoint was also an open redirect, and wildcard trustedOrigins entries could match URLs outside the intended scheme, host or path. You are affected if your server registers expo() from @better-auth/expo 1.4.0-beta.6 or later. Upgrade both @better-auth/expo and better-auth to 1.7.16 (or 1.8.0-beta.5), then rotate the application secret, because signatures issued before the fix stay valid until it changes.

Laravel framework (laravel/framework) TokenGuard

Laravel's built-in TokenGuard, when configured as a standard token-based API guard, can be bypassed to log in as an arbitrary existing user without their API token. On some database configurations (MySQL/MariaDB), a crafted non-string credential is mishandled during the lookup so the query matches an unintended user instead of failing. An unauthenticated attacker can take over accounts on any route protected by that guard. Upgrade laravel/framework to 12.68.0 or 13.29.0. GitHub rates it critical (CVSS 4.0 score 9.2).

ClickHouse Server

ClickHouse fixed a flaw in ClickHouse Server that, under certain conditions, lets an unauthenticated user with network access run arbitrary code on the server (CVE-2026-116366, CWE-190 integer overflow, CVSS 4.0 score 9.5 critical). Fixes shipped Oct 30 2026 in v26.3.62.3-lts, v26.8.36.3-lts, v26.9.27.3-stable and v26.10.3.7-stable. ClickHouse says the fix is already applied to all ClickHouse Cloud and BYOC deployments, so self-hosted servers are the ones that need upgrading. The bug was reported by researcher Elshad Toklayev through ClickHouse's bug bounty. No public exploit or in-the-wild exploitation has been reported.

Canonical LXD (Incus fork also affected)

On Nov 6 2026 Canonical published a wave of critical LXD advisories (CVSS 9.9) for host escapes. Already tracked: GHSA-jpf8-86f3-wp38 / CVE-2026-48752 (templates/ symlink AFRW) and GHSA-9j25-mm2h-2f76 / CVE-2026-48750 (exec-output symlink AFW). Same-day additions: GHSA-vghh-5rfx-xhq8 / CVE-2026-48749 (rootfs/ symlink AFRW in a crafted image); GHSA-pjff-c2wc-f6jm / CVE-2026-48769 (arbitrary file write via trusted Incus-Image-Hash path traversal on source.type=url downloads); GHSA-fmc8-p6q7-75cc / CVE-2026-48755 (backup compression_algorithm argument injection leading to AFW/ACE). All were reported from the Incus fork. Fixes are in the github.com/canonical/lxd Go module; upgrade to fixed builds that include the advisory commits / firstPatched versions. Also folded GHSA-47w9-6r3f-938g / CVE-2026-48751: instance snapshots ignore `restricted.containers.lowlevel=block`, allowing abuse of raw.lxc / raw.qemu hooks for host ACE after moving a crafted snapshot into a restricted project; LXD >= 4.12 affected; patched in 6.9 / 5.21.5 / 5.0.7 (reported from Incus GHSA-48q5-w887-33wv; originally published Jun 26 2026, resurfaced in the Nov 6 critical GHSA wave). Further folded high-severity project-restriction bypasses GHSA-7mr3-28h5-m5vx (custom volume copy across projects) and GHSA-qx75-2p3r-pwm5 (instance copy across projects): authenticated caller knowing source project/volume or instance names can copy secrets they should not view; LXD >= 4.12; patched in 5.0.7 / 5.21.5 / 6.8 (note 6.8, not only 6.9); GHSA firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-64f3-v33m-w89f and GHSA-c9f5-j9c3-mhrg; no CVE IDs assigned on the GitHub Advisory records as of this fold.

Armeria (LINE)

LINE's Armeria 1.43.0 security release patches three High issues published Nov 6 2026: GHSA-xqhm-4ph4-423v / CVE-2026-121823 lets attackers bypass path-scoped decorators (for example decoratorUnder("/admin", auth)) by inserting a '.' path segment that FileService, TomcatService and JettyService still resolve; GHSA-2pfv-5p52-crjm / CVE-2026-121824 lets a reachable Thrift endpoint allocate attacker-controlled heap from malformed TBinary/TCompact length fields before the body is verified; and GHSA-6hgp-j5h7-33m3 / CVE-2026-121820 lets an unauthenticated HTTP-Redirect SAMLRequest/SAMLResponse inflate into an unbounded buffer in armeria-saml before any signature check. The same release also fixes Moderate CORS any-origin route ignore (GHSA-386q-mrg6-jfj8 / CVE-2026-121821), Low FileService stored XSS (GHSA-x9vf-hjgg-cq25 / CVE-2026-121822), and Moderate armeria-xds symlink SDS confinement bypass (GHSA-m64h-m6r5-6jrx / CVE-2026-121819). Upgrade to 1.43.0.

SUSE Rancher Manager and Rancher Fleet

SUSE shipped Rancher Manager v2.15.3, v2.14.7, v2.13.11, v2.12.15 and v2.11.19 with Fleet v0.16.3, v0.15.8, v0.14.12 and v0.13.17 on Oct 29 2026, fixing six vulnerabilities. The worst is CVE-2026-94290 (CVSS 4.0 9.4 critical) in Fleet's agent management controller, which runs on the Rancher local cluster as cluster-admin: it did not restrict which kubeconfig secrets a Fleet Cluster object could reference, so an authenticated Rancher user with only the default user global role could get full cluster-admin on the management cluster, exposing every secret there, including credentials for all downstream clusters. Fleet is enabled by default in Rancher. The release also fixes CVE-2026-104615 (high), a Fleet cluster identity takeover where a holder of a workspace registration token could claim another cluster's identity and read Secrets and ConfigMaps synced into its Fleet namespace; CVE-2026-104623 (medium), where any authenticated user could get an unprivileged shell pod on the management cluster; CVE-2026-88809 (high), a meta proxy allowlist bypass leading to server-side request forgery; CVE-2026-88811 (high), where the meta proxy leaked the caller's Rancher credentials to third-party cloud provider hosts; and CVE-2026-88810, a GlobalRole RBAC escalation fixed in v2.15.3.

Airbyte (self-managed)

Self-managed Airbyte before 2.2.0 let Connector Builder / Manifest Server load unintended Python classes from a declarative manifest custom component, even when AIRBYTE_ENABLE_UNSAFE_CODE was off, so a user who could submit a test-read manifest could run commands inside those containers. On Airbyte 2.x that needs Workspace Reader or Organization Reader (or higher); on Airbyte 1.x with the legacy Helm chart the Connector Builder ignored global.auth.enabled, so anyone who could reach that service could exploit it unauthenticated. Successful exploitation may expose credentials and secrets in the container and reach internal services. Fixed in Airbyte 2.2.0 (manifest-server 7.23.7); Airbyte 1.x will not get a fix and should upgrade to 2.2.0+. Airbyte Cloud is not affected. JVN#12040144 (published Nov 4 2026) states the flaw has been confirmed exploited in the wild. Workarounds until you upgrade: restrict network access to Connector Builder / Manifest Server to the Airbyte server only, and limit Reader roles to trusted users.

Postiz (gitroomhq/postiz-app), self-hosted

Two critical bugs in the self-hosted Postiz social media scheduler, both reported with working PoCs by Anthropic. Postiz signed session, invite and password-reset tokens with one shared secret and no purpose marker, and an extension-refresh route signed request data, so any registered user could forge tokens and become super admin of another organization (CVE-2026-115933, CVSS 9.9). A separate path traversal in post media let a registered user have the worker send any server file, including the JWT secret and env file, to their own Discord server (CVE-2026-115932, CVSS 9.6). Both are fixed in Postiz 2.25.3; self-registration is open by default, so upgrade now.

SGLang inference engine (disaggregated prefill/decode mode); Cloudflare Workers AI GLM-5.3 model

Between Aug 27 and Sep 9 2026, Cloudflare's GLM-5.3 model on Workers AI (@cf/zai-org/glm-5.3) sometimes answered very long prompts with data from other customers' recent requests to the same model, Cloudflare disclosed on Oct 26. 155 responses were affected, all to prompts longer than 681,280 tokens. Two issues combined: Cloudflare launched the model with a 1,048,576-token context window but a prefill KV cache pool that held only 681,280 tokens, and SGLang, the open-source inference engine it uses, mishandled over-length requests in disaggregated prefill/decode mode. Instead of returning an error, it swapped the prompt for a one-token placeholder, transferred one KV page, and let the decode node attend over stale cache pages still holding earlier users' prompts and partial generations, returning HTTP 200. Researcher Gadi Evron of Knostic reported it via HackerOne on Sep 8; Cloudflare took the model offline on Sep 9, fixed its configuration and engine, and restored it the same day. It found no evidence of deliberate exploitation and says no other Workers AI model was affected, so Cloudflare customers have nothing to do. Anyone running SGLang in disaggregated prefill/decode mode should update to v0.5.22 or later (or backport #36988 and #38935) and check that each node's KV pool is at least as large as the context length.

Ruby on Rails Active Storage (activestorage gem)

A critical (CVSS 9.8) flaw in Rails Active Storage lets an unauthenticated attacker write arbitrary files on the server by uploading a crafted file, and, when attachments use the Disk service, read any file the app can read, including secret_key_base and credentials for other systems, which may lead to remote code execution. Active Storage put no limits on which ImageMagick coders an upload could reach, and its ImageMagick analyzer runs on attach, so simply attaching the upload is enough; the reported chain used an SVG reaching the MSL scripting coder. Apps are affected if they use ImageMagick for Active Storage (variant_processor :mini_magick, the default for load_defaults 6.1 or earlier), run a host ImageMagick policy that doesn't block those coders (Debian and Ubuntu's policies don't), and accept untrusted uploads. Fixed in activestorage 8.1.4.1 and 8.0.5.2, which ship a restrictive ImageMagick policy and need mini_magick 5.1 or later; series before 8.0 get no fix. No CVE yet; the advisory does not say whether it has been exploited.

nuxt/content (Nuxt Content query API)

On Oct 21 2026 the Nuxt Content maintainers published three High advisories for the default unauthenticated POST /__nuxt_content/:collection/query endpoint in nuxt/content v3. CVE-2026-102650 (GHSA-xxrh-5hgg-gj4h): assertSafeQuery blocked only a small set of SQL keywords and did not reject expensive SQLite functions (randomblob/zeroblob/hex/length), so an unauthenticated attacker could force large allocations and block the Node event loop (DoS). GHSA-p7p3-px4q-v2rr: quote-escape and FROM-matching bugs in assertSafeQuery enabled unauthenticated boolean-blind SQL injection to read any table the DB user can see. GHSA-wjh8-qcrm-wf29: improper validation allowed unauthenticated cross-table data reads. Affected: nuxt/content >=3.0.0 <3.15.2 (fixed DoS/SQLi class in 3.15.2); further hardening in 3.16.1/3.16.2. Upgrade to >=3.16.2. Fully static prerendered deployments without the API route are not affected. Workaround: block POST /__nuxt_content/*/query at the proxy/WAF or prerender so the endpoint is not deployed.

Drupal Commerce Core (commerce module)

Drupal Commerce Core, the shopping cart and checkout module for Drupal stores, doesn't sufficiently protect certain routes and entity fields, leading to an access bypass that may financially impact the vendor. The Drupal Security Team rates it Highly critical (21/25, no access needed) and says it is being actively exploited in the wild. Upgrade to Commerce Core 3.3.13 or 8.x-2.41, and audit orders for inconsistencies.

jackson-databind (FasterXML Jackson, Java)

A critical bypass in jackson-databind, the Java JSON library, lets an attacker who controls polymorphic JSON smuggle arbitrary classes in as generic type arguments or array element types, even when the same class is rejected as a direct type ID. It's an incomplete fix for CVE-2026-54512. Affected paths include annotation-based class-name polymorphism with a default Jackson 3.x JsonMapper, configured default typing in Jackson 2.x and 3.x, Spring Security's legacy Jackson 2 module, and Spring Data Redis's RedisSerializer.json() and GenericJackson2JsonRedisSerializer(). The advisory demonstrates a Spring path that ends in ProcessBuilder.start() under the application account. Exploitability depends on the app's polymorphism configuration and classpath. Upgrade to jackson-databind 2.18.12, 2.21.8, 2.22.4, 3.1.8 or 3.2.4. GitHub rates it critical (CVSS 9.8).

FrankenPHP before 1.13.5; Caddy before 2.11.9 (FastCGI / php_fastcgi)

FrankenPHP 1.13.5, released November 5, is a security release fixing 17 vulnerabilities, most of them found by Anthropic's OSS Scanner. The most severe (High, GHSA-j99q-3wr8-xj43) let php_server run an uploaded non-PHP file as PHP, for instance /uploads/photos.php.php/avatar.jpg, so an attacker able to upload a file under the document root could execute code. Several others affect the default php_server configuration: an open redirect, HTTP/2 Host spoofing, a crash a client can trigger with the official Docker images' PHP settings, and slow request bodies that block every PHP thread. Others include Caddy path-rule bypasses with dot segments and encoded slashes, source disclosure with worker match rules, and session output sent to the wrong client in worker mode. The release bundles Caddy 2.11.9, released the same day, which fixes FastCGI issues of its own: clients overriding HTTP_* variables set with env, encoded-slash and Windows 8.3 short-name path-rule bypasses, HTTP/2 host confusion, and a stricter client_auth being silently dropped when TLS policies merge. Some fixes change behavior and may break apps that rely on the old behavior. Upgrade FrankenPHP to 1.13.5 and Caddy to 2.11.9.

FreeRDP before 3.32.2 (client, server and freerdp-proxy)

FreeRDP, the open-source RDP client, server and proxy library used by Remmina, GNOME Connections and many Linux desktops and thin clients, shipped 3.32.2 as a security release that hardens it against malicious client and server messages, with more than 40 GitHub advisories. CVE records for them were published on November 3 and 4. CVE-2026-121392 (CVSS 4.0 9.1) lets a man-in-the-middle holding a certificate from any client-trusted CA bypass server identity checks in tls_verify_certificate and intercept RDP sessions. CVE-2026-121953 (9.3) is a use-after-free in the client's rdpgfx channel that a malicious RDP server can trigger to crash the client or potentially execute code, and CVE-2026-121952 (9.3) is an out-of-bounds write in freerdp-proxy reachable by a connecting client. The rest are heap overflows, use-after-frees, a Kerberos double free and denial-of-service bugs, most needing the user to connect to a malicious or compromised server. Update FreeRDP to 3.32.2 or your distribution's patched package.

BTCPay Server (self-hosted) 2.4.1 and earlier

Attackers stole Bitcoin and Litecoin from hot wallets on self-hosted BTCPay Server instances running 2.4.1 (released July 23, 2026) or earlier. BTCPay says they used a different method to exploit the vulnerability fixed in 2.4.2 (August 7) and logged in as an administrator on hit servers. It has seen no impact on servers already on 2.4.2 or later and no credible drain reports on the latest 2.4.7. Bitquery counted about $1.62M (18.38 BTC and 3,405 LTC) across 682 sweeps. Operators on 2.4.1 or earlier should sweep remaining hot-wallet funds to a new wallet with a new seed, move to a fresh server on the latest release, and rotate every credential the old server could reach, even if no theft was noticed. Wallets with spending keys held off the server were not affected.

Docker Sandboxes (sbx)

CVE-2026-121614 affects Docker Sandboxes 0.31.0 before 0.50.0. Host-side Git commands did not neutralize repository-controlled Git configuration. An attacker who can modify a host repository's Git config—for example through a direct-mode sandbox with the repo mounted read-write—can set core.fsmonitor or another setting that invokes an external program. A later clone-mode fetch, or from 0.39.0 an sbx kit push, can run that program on the host with the user's privileges, outside the microVM. Clone-mode's read-only host mount alone cannot poison the config. Fixed in Docker Sandboxes 0.50.0 (released Oct 26 2026; CVE published ~Nov 3). Vendor CVSS 4.0 is 7.1 (High). Upgrade to 0.50.0+; avoid read-write mounts of untrusted repos until patched.

Android (Framework / System)

Google's Android Security Bulletin for November 2026, published Nov 2, says the most severe issue is CVE-2026-58868, a critical Framework remote-code-execution bug that needs no additional privileges and no user interaction. It affects Android 14, 15, 16, 16-qpr2 and 17. The same 2026-11-01 patch level also includes two critical System RCEs (CVE-2026-58876, CVE-2026-58936) and the already-tracked SMS-of-death DoS (CVE-2026-58882). The 2026-11-05 patch level adds kernel and vendor fixes. Update devices to security patch level 2026-11-01 or later (2026-11-05 for the full set). Google said it notifies partners at least a month before publication; there was no claim of in-the-wild exploitation for CVE-2026-58868 in the bulletin.

EPICS Base (Experimental Physics and Industrial Control System)

On October 27 CISA published ICS advisory ICSA-26-300-01 for EPICS Base, the open source control-system toolkit used to run particle accelerators, fusion experiments and other large research facilities. EPICS Base 7.0.10 and earlier have four bugs in network message handling: CVE-2026-114595 (CVSS 3.1 9.8, critical), an integer overflow in network request processing that allocates memory with the wrong size and can lead to memory corruption, denial of service or potential remote code execution; CVE-2026-114596 (8.2), an integer overflow from improper message length validation that causes an out-of-bounds write; CVE-2026-114597 (7.5), out-of-bounds reads from insufficient bounds checking; and CVE-2026-114598 (7.5), a type confusion that can cause denial of service and expose adjacent memory. Shubham Raj of Causal Security reported them, and The Register reports the company's autonomous AI agent Cipher found all four in under four hours. The EPICS community released EPICS Base 7.0.11 with the fixes; CISA's advisory does not mention exploitation. Update to 7.0.11 and keep EPICS networks isolated from untrusted access.

Gitea

Gitea 28.3.0 (third maintenance release of the 28 series) ships a large security batch. CVE-2026-120263: when ACCOUNT_LINKING=auto and registration is enabled, the link-account sign-up form looked up the account to link by attacker-submitted username/email instead of the OAuth2 identity, allowing passwordless takeover of existing accounts. The release also fixes high-severity Actions issues (fork workflows obtaining secrets/write tokens via review commit_id; Actions task tokens authenticating to the REST API without scope), stored XSS via artifact Content-Encoding, write-collaborator release/milestone/label destruction on archived repos, and additional medium issues around token scopes. Gitea strongly recommends upgrading ASAP. Fixed in 28.3.0.

Ruby (CRuby / Onigmo regex engine)

Ruby released 4.0.9, 3.4.12 and 3.3.13 on Oct 23 2026 to fix bugs in its Onigmo regular-expression engine (a double free and integer overflows) that GitLab turned into remote code execution on its servers, tracked by GitLab as CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264. Any Ruby app that compiles a regex from an attacker-controlled string (Regexp.new, Regexp.union, Regexp.compile or /#{input}/) is exposed; Regexp.timeout and pattern-length limits do not protect. Apps that only use their own hard-coded regexes are not affected. Ruby 3.2 and older are end-of-life and get no fix.

Chartbrew (chartbrew/chartbrew)

NVD published a Chartbrew advisory cluster on 2026-11-06 for issues patched earlier in v5.2.1 and v5.2.3. Critical CVE-2026-85295 (CVSS 9.8): stock source/docker-compose installs keep the shipped CB_SECRET default, so an unauthenticated attacker forges session JWTs for any user (password/2FA bypass). Critical CVE-2026-54349 (CVSS 9.8): unauthenticated SQL injection via dashboard/chart filter variable substitution on public/embedded charts (fixed in 5.2.1). High CVE-2026-85712 (CVSS 8.8): authenticated cross-tenant project takeover via caller-controlled body.team_id. Same 5.2.3 wave also covers forgeable share tokens (CVE-2026-85708), MongoDB date-variable NoSQLi (CVE-2026-85726), root-path file deletion via SSL/SSH cleanup (CVE-2026-85736), unauthenticated BullMQ admin dashboard at /apps/queues (CVE-2026-86005), and NAT64 SSRF bypass in outbound URL guards (CVE-2026-54589, fixed in 5.2.1). Upgrade to Chartbrew 5.2.3 (at least 5.2.1 for the SQLi/SSRF subset) and rotate secrets.

Charmbracelet Wish

Charmbracelet Wish (SSH server middleware for Go) before 2.0.5 has a path traversal in the git middleware that lets authenticated SSH users escape the configured repository directory with crafted repo paths. Fixed in v2.0.5 (commit 533db0d). CVSS 8.1 per NVD/VulnCheck.

Next.js (next on npm), sharp / librsvg

On Oct 14 2026 Vercel shipped Next.js 16.4.1 and 15.5.28 with two critical unauthenticated remote code execution fixes held back from the September release: CVE-2026-96889 / GHSA-2464-fhr4-w9xw, a use-after-free in librsvg (via sharp) reachable through the Image Optimization API when SVGs are processed on glibc-based Linux, and GHSA-673q-mjm6-r5xr, RCE in App Router apps with Cache Components when a `use cache` function returns multiple typed arrays. A high-severity Server Actions DoS (GHSA-p3m5-59mp-jv5r) is fixed too. GitHub added the SVG advisory to its global database on Oct 22. No known exploitation.

WordPress core

WordPress released 7.1.4 on Oct 28 2026 as a security release and recommends updating sites immediately. It fixes a weakness in the WordPress upgrade process that can lead to remote code execution during the upgrade window (reported by Umut Bayram), a long list of stored XSS issues (crafted block markup, Privacy Data Removal Requests, the Interactivity API, Customizer selective refresh, the Categories, Playlist, image and comments-pagination blocks, and specially crafted user logins), a stored denial of service in the Interactivity API, unpublished Customizer changesets being discoverable by unauthenticated users, and Notes being readable by privileged users who can't edit the post. It also updates the bundled root certificates because of the eMudhra revocation. Sites with automatic background updates get it automatically; the fixes are being backported to every branch still eligible for security fixes (back to 4.7), and those backports ship as they become ready. WordPress 7.2 Beta 3 has the same fixes. Wordfence rates the upgrade-window RCE CVSS 8.1 (unauthenticated, high complexity: WordPress 4.7 to 7.1.3 unpack full-package updates into a predictable, web-reachable folder under wp-content/upgrade, and an attacker who requests the staged installer in the seconds-long window can reach PHP code execution). Wordfence says attackers began trying to exploit it within minutes of its firewall rule going live on Oct 28 and logged more than 18,500 requests to staged setup-config.php paths in 21 hours; it reports attempts, not confirmed compromises.

IBM API Connect V12 OnPrem

IBM published a security bulletin on Nov 5 2026 covering multiple vulnerabilities in IBM API Connect V12 OnPrem (v12.1.0.0 through v12.1.1.2), fixed by upgrading to v12.1.1.3. The bulletin lists 202 CVEs scored by IBM; 46 are critical (CVSS ≥ 9.0). Highlights include unauthenticated missing-authorization tenant create/modify/delete (CVE-2026-17362, CVSS 9.8), authentication bypass via improper cryptographic-signature verification (CVE-2026-17301, 9.8), hard-coded credentials giving full admin control (CVE-2026-17360, 9.8), unauthenticated path-traversal RCE (CVE-2026-17340, 9.8), OS command injection (CVE-2026-17408, 9.8), XXE (CVE-2026-16884, 9.9), and authenticated SQL injection / code-generation RCEs rated 9.9. IBM says there are no workarounds — upgrade to v12.1.1.3 via Fix Central. NVD detail pages for several of these IDs were not populated at first publication.

SEPPmail Secure Email Gateway (SEG)

SEPPmail's 15.1.1 patch release (Oct 27 2026) fixes five CVEs in Secure Email Gateway before 15.1.1. The worst are CVE-2026-114424 and CVE-2026-114425 (both CVSS 9.2): an unauthenticated remote sender can execute OS commands as root when an active address-replacement rule uses message-derived replacement text evaluated as Perl, and crafted Large File Transfer attachment metadata can make the root mail worker read, move or delete accessible files when LFT is enabled. Also fixed: pre-auth upload resource exhaustion (CVE-2026-114426, 8.7), GINA LDAP account enumeration (CVE-2026-114420, 8.3) and GINA empty-password recovery takeover (CVE-2026-114421, 6.9). CVE records appeared around Nov 4 2026. Upgrade appliances (including HIN Mailgateway builds on the same firmware) to 15.1.1.

Keycloak / Red Hat Build of Keycloak (keycloak-services)

A flaw in Keycloak's reset-credentials flow (keycloak-services) lets an unauthenticated attacker force a password reset for any user without clicking the emailed verification link, then set new credentials and take over the account. Red Hat rates it CVSS 9.1. Fixes shipped in August (26.4.15, 26.6.6, 26.7.2); on Oct 21 a full proof-of-concept with check and takeover modes was published on Exploit-DB, so unpatched Keycloak instances should be upgraded now.

Fortinet Multiple Products

FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Added to CISA KEV on 2026-10-16.

Plex Media Server

Four Plex Media Server flaws (CVE-2026-96652/96654/96655/96656), together called Plex2Shell, chain to unauthenticated admin-token theft and code execution. Researcher Zach Main published details Oct 16 and a PoC shortly after; exploitation of internet-facing servers (cryptominers + residential proxies) began by Oct 17. Fixed in 1.43.3.10861 (released earlier in August); CISA added the chain to KEV with a federal deadline of Oct 23.

APT package manager (Debian)

A flaw in APT, Debian's package manager, lets a man-in-the-middle attacker replace a package after it has been verified, resulting in arbitrary code execution as root. Per Debian's advisory DSA-6607-1, APT can merge two different package downloads after an HTTP redirect gives them the same URI, and improper file handling when resuming an HTTP download allows the swap. It was found by Max Justicz. Debian stable (trixie) is fixed in apt 3.0.4, which also addresses several out-of-bounds access issues, and Debian 12 (bookworm) is fixed in apt 2.6.2 (DLA-4880-1); Debian testing (forky) was still listed as vulnerable. Ubuntu published fixes on Nov 4 for 26.10, 26.04 LTS, 24.04 LTS and 22.04 LTS, with Ubuntu Pro fixes for older releases. The bug needs a non-zero Acquire::Retries setting, which is the default from Debian 12 and Ubuntu 22.04 on, so older releases are unaffected in a default configuration. No exploitation has been reported.

Subnet Solutions PowerSYSTEM Center

CISA ICSA-26-307-01 covers two critical flaws in Subnet Solutions PowerSYSTEM Center (ICS/OT software used in energy and critical manufacturing). CVE-2026-63017 is incorrect authorization that lets a low-privileged authenticated user reach administrator-only resources (CVSS 3.1 9.0, AV:A). CVE-2026-63774 is SQL injection in the report designer that lets an authenticated user run unauthorized SQL (CVSS 3.1 9.0, AV:A). PowerSYSTEM Center 2020 through 5.29.x is affected by the authz bug; 2024 6.0.x–6.2.x and 2026 7.0.x–7.1.x are affected by both. Fixes: 2020 Update 30, or upgrade 2024/2026 lines to PowerSYSTEM Center 2026 Update 1.1. CISA says there is no known public exploitation and the bugs are not remotely exploitable (adjacent network). Unpatched mitigations: monitor user activity and disable F12 DevTools for Client Access Server users (authz); disable report-designer access (SQLi). Reported to CISA by Chinmay Patel (Digital Boundary Group) and by Subnet Solutions.

Juniper Networks Session Smart Router and Session Smart Conductor

Juniper published an out-of-cycle bulletin (JSA112183) on Oct 28 fixing multiple internally found vulnerabilities in Session Smart Router (SSR) and Session Smart Conductor, its SD-WAN routing platform. Two are rated CVSS 9.8: CVE-2026-103409 lets an unauthenticated network attacker get administrative privileges on a Session Smart Router by passing crafted URL parameters to an insecure endpoint that runs as root, but only before the device is onboarded to Mist or Conductor. CVE-2026-103406 is an OS command injection in Session Smart Conductor's AutomatedProvisioner that lets a remote attacker run commands as root through a crafted salt minion ID. Both affect versions before 7.0.5, 7.1.x before 7.1.7 and 7.2.x before 7.2.3, and are fixed in 7.0.5, 7.1.7 and 7.2.3. Juniper lists no workarounds and says it is not aware of malicious exploitation.

Avast / AVG / Norton antivirus (Gen Digital) on Windows

On Nov 6 2026 NVD published three Gen Digital (security@nortonlifelock.com) advisories affecting Avast, AVG and Norton Windows products before 26.7. CVE-2026-80301: the Avast sandbox virtualizes filesystem/registry but does not adequately restrict Task Scheduler COM, so a local low-privileged process inside the sandbox can schedule host tasks and escape to elevated host code execution. CVE-2026-80302: insufficient isolation in sandbox file virtualization lets a sandboxed process write arbitrary files to protected host locations and achieve host code execution. CVE-2026-80303: an integer underflow in the WFP stream parser can crash the system (DoS), triggerable remotely via filtered network traffic or locally. Update Avast/AVG/Norton to 26.7 or later.

Babelfish for Aurora PostgreSQL / Babelfish for PostgreSQL extension

On Nov 6 2026 AWS published Important bulletin 2026-166-AWS for two memory-safety issues in the Babelfish TDS protocol layer used by Babelfish for Aurora PostgreSQL (SQL Server wire protocol). CVE-2026-119923: a memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the confidentiality, integrity, and availability of the database process. CVE-2026-119924: a memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authenticated actor to read adjacent process memory or cause a denial of service. AWS addressed the issues in Babelfish for PostgreSQL extension versions 4.10, 5.6 and 6.1, and lists patched Aurora PostgreSQL versions with Babelfish enabled. Workaround until upgraded: restrict network access to the TDS port (default 1433) to trusted sources using VPC security groups.

AWS Trusted Remote Execution (REX) set-up guide example SSM documents (Rex-RO / Rex-RW)

On Nov 6 2026 AWS published Important bulletin 2026-173-AWS for CVE-2026-122193 (GHSA-95g5-m242-wvhr): an OS command injection issue in an example from the Trusted Remote Execution (REX) set-up documentation. The example script creates AWS Systems Manager documents Rex-RO and Rex-RW for running scripts on managed instances; due to how that example handled input parameters (including scriptArgs), a user permitted to invoke the SSM document could supply crafted input that runs unintended OS commands on the managed instance outside the REX sandbox. This is not a flaw in a shipped REX artifact — only operators who created those SSM documents by following the guide are affected. AWS removed the example from the guide. Mitigation: delete any Rex-RO / Rex-RW SSM documents created from the example in each account and Region where it was run. No workaround other than deleting the documents.

Foxit Workspace (https://ai.foxit.com/)

On Nov 6 2026 Foxit updated its hosted Foxit Workspace service (https://ai.foxit.com/) for three Important issues. CVE-2026-119431 and CVE-2026-119433 are server-side request forgery flaws in the file-upload and PDF-export flows: insufficient validation of user-supplied URLs and network parameters could let an authenticated attacker make the service fetch arbitrary internal or external resources and return their contents (CVSS 3.0 7.7). CVE-2026-119432 is a stored cross-site scripting bug in file share preview: an attacker could upload a crafted file, share it, and when a victim opens or previews it the script runs in the application origin and may access locally stored credentials (CVSS 3.0 8.7). Foxit rates all three Important and says no customer action is required; the hosted service is already patched. Reported by mrfathoni.

Microsoft Entra Device Registration (hosted cloud service)

CVE-2026-109469 is an authorization bypass through a user-controlled key in Microsoft Entra Device Registration that Microsoft rates Critical with CVSS 3.1 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). It lets an unauthorized attacker elevate privileges over a network against the Entra Device Registration service. Microsoft says the vulnerability has already been fully mitigated in the hosted service, customers need no action, and the CVE is published for transparency under Microsoft's cloud-service CVE program. Not known to be exploited or publicly disclosed before publication; Exploitation Less Likely per MSRC.

INFINITT ULite (universal medical image viewer)

INFINITT Healthcare advisory INFINITT-SA-2026-001 (Nov 5 2026) and NCSC.ch CVE records cover two issues in the ULite medical imaging universal viewer. CVE-2026-19877 (High, CVSS 3.1 7.5) lets an unauthenticated remote attacker brute-force the low-entropy password on image-share links with no attempt limiting, gaining unauthorized access to shared medical images within the link validity window on ULite 5.0.2.1_BN48_20260528 and earlier. CVE-2026-19876 (Medium, CVSS 6.1) is a pre-authentication reflected XSS on the login/SSO error page via an unsanitized request parameter. Both are fixed in ULite 5.0.2.1 BN50. INFINITT says there is no indication of exploitation and is deploying the update to customers under existing maintenance agreements; sites should schedule the BN50 update with INFINITT support.

Apache OFBiz

Apache OFBiz 24.09.08 fixes 46 vulnerabilities in every earlier release, several of them critical. Unauthenticated attackers can run code on the server through login-page widget injection (CVE-2026-83542), attacker-controlled Screen definition loading (CVE-2026-68524) and a saved-view authorization bypass (CVE-2026-73578). They can also take over a full user session by replaying a captured externalLoginKey (CVE-2026-82907). On 24.09.06 and 24.09.07 deployments upgraded from older releases, a forged JWT signed with the old default key gives admin access (CVE-2026-105330). The batch also includes a password-reset account takeover, a REST auth bypass when the auth attribute is omitted, SQL injection, XXE, SSRF and many missing-authorization bugs. No exploitation has been reported, but older OFBiz bugs have been exploited in the wild.

Cisco UCS Central Software before 2.1(2c)

Cisco published a high-severity advisory for UCS Central Software, its management platform for multiple Cisco Unified Computing System domains. CVE-2026-76506 (CVSS 7.6, CWE-22 path traversal) is insufficient validation of user-supplied input in an HTTP request to the web-based management interface. An authenticated remote attacker with valid user credentials can send a crafted request to execute arbitrary commands, write arbitrary files to the filesystem and obtain sensitive information. It affects UCS Central regardless of configuration, and there are no workarounds: upgrade release 2.1 to 2.1(2c), and migrate release 2.0 and earlier to a fixed release. Cisco PSIRT says it is not aware of public announcements or malicious use.

LiteSpeed Cache for WordPress

LiteSpeed Cache for WordPress, a plugin with more than 7 million active installs, cached WooCommerce Store API cart and checkout responses as public objects in all versions up to 7.9.1. With the default Cache REST API setting on, a shopper’s personalized /wc/store/v1/cart or /wc/store/v1/checkout response could be served to any later visitor without cookies or a token. Per Wordfence, that exposes the shopper’s billing and shipping details (name, company, address, email, phone), cart contents and totals, their live Cart-Token session JWT and nonce (enough to hijack the cart or checkout session), and the order_key on checkout. Only sites running WooCommerce with cart or checkout in use are affected. Wordfence reported it to LiteSpeed on Sept 17, LiteSpeed fixed it in 7.9.2 on Oct 19, and the CVE was published on Nov 4. Wordfence rates it CVSS 8.2 (high). No exploitation has been reported.

Symfony Serializer (symfony/serializer)

On Nov 4 2026 Symfony disclosed two high-impact Serializer file-read bugs fixed in symfony/serializer 5.4.56 / 6.4.50 / 7.4.23 / 8.1.11. CVE-2026-118515: when deserializing untrusted data into a DTO with an UploadedFile (or other SplFileInfo subclass) property—common with #[MapRequestPayload]—ObjectNormalizer could instantiate UploadedFile from attacker-controlled path/originalName/test fields, so the app treats any PHP-readable server file as an upload (read, move via rename when test:true, or path existence). CVE-2026-121623 (GHSA-pxj9-jh84-vhm5): DataUriNormalizer accepted case-insensitive DATA: schemes that PHP opens as relative local paths, so denormalizing to SplFileObject/File/SplFileInfo could read arbitrary files (e.g. DATA:,/../../../../etc/hostname). FrameworkBundle registers DataUriNormalizer by default. Same-day Symfony published six additional Serializer/security advisories; upgrade Serializer (or the framework release that pulls these versions) on every maintained branch.

WatchGuard AuthPoint Authentication Gateway before 7.6.0

WatchGuard published four advisories for the AuthPoint Authentication Gateway, the on-premises component that connects its AuthPoint MFA service to local LDAP and RADIUS authentication. CVE-2026-121637 (CVSS 8.9) lets a network attacker who has a valid header signature forge the authentication result and transaction id in the LDAP authentication callback. CVE-2026-121640 (9.1) lets an attacker who observed a legitimate request between Gateway components replay it to perform administrative actions. CVE-2026-121638 (9.1) is improper certificate validation that lets an on-path attacker intercept and modify traffic between the Gateway and local authentication providers. CVE-2026-121639 (9.2) is missing authentication that lets a remote unauthenticated attacker with network access disrupt authentication and delete the local directory sync configuration. All versions from 1.0 up to 7.6.0 are affected; update the AuthPoint Gateway to 7.6.0, released October 29.

Barracuda ESG, ADC, BMA, WCC, WAF, WSG

Barracuda Networks disclosed two flaws affecting several appliances: CVE-2026-116606, a pre-authentication authorization bypass in Email Security Gateway, and CVE-2026-111560, a command-injection bug affecting ESG, Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall and Web Security Gateway. Barracuda says successful exploitation needs access to the administrative interface; chained, the bugs can bypass authorization and obtain root. Patches are available per product via Barracuda Campus articles. Restrict admin interfaces to trusted networks and apply the latest firmware immediately. Coverage appeared Nov 3 2026 (BleepingComputer, The Hacker News, CCB Belgium).

SolarWinds Dameware

SolarWinds published Dameware 2026.3.1 on Nov 3 2026 to fix three of its own CVEs. The worst is CVE-2026-28336, a command-injection bug rated CVSS 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H): an authenticated Dameware user can inject commands that compromise the remotely controlled host, not only the Dameware instance. The same release fixes CVE-2026-28335 (authenticated buffer overflow leading to RCE, 8.4) and CVE-2026-28327 (DLL hijacking during install, 8.2, needs local admin). Dameware 2026.3 and all earlier versions are affected. Upgrade to 2026.3.1; until then restrict who can authenticate to Dameware and block external access to its ports. No public exploitation reported at disclosure.

pgAdmin 4

pgAdmin 4 9.19 (released Oct 29 2026) fixes a batch of CVEs published on Oct 30 2026, all affecting versions before 9.19. The worst, CVE-2026-116241 (CVSS 4.0 9.4, CVSS 3.1 9.9), bypasses the earlier fix for CVE-2026-17566: in the Import/Export Data tool a backslash inside a double-quoted identifier lets a query escape psql's \copy wrapper, so a TO PROGRAM clause runs on the pgAdmin host as the operating-system account running pgAdmin. An ordinary database role can trigger it, since it can turn standard_conforming_strings off for itself and the Import/Export permission is granted to non-administrators by default. CVE-2026-116238 (CVSS 4.0 9.2) lets an unauthenticated attacker in server mode bypass the failed-login lockout and guess passwords for any internal account, including the administrator's. Other fixes cover LDAP/Kerberos accounts colliding with same-named users (CVE-2026-116239), pgAdmin's own SSH, Kerberos, password-file and certificate credentials being used for user connections, storage-directory path escapes and symlink races, and sessions that survive a password change. No exploitation has been reported so far.

Thales Sentinel Keys Server (Windows)

Thales published two CVEs on Oct 30 2026 for Sentinel Keys Server on Windows, the license server used with Sentinel Keys software protection. CVE-2026-78403 (CVSS 4.0 9.3 critical) is a stack-based buffer overflow with missing authorization: the server doesn't check the length of the first field in an HTTP request, so an unauthenticated remote attacker can send a crafted request that may lead to code execution as NT AUTHORITY\SYSTEM. CVE-2026-78402 (CVSS 4.0 7.3 high) is a similar unchecked first field in local input messages that allows local privilege escalation to SYSTEM. Both affect versions lower than 1.3.8.0. No exploitation has been reported so far.

LM Studio (desktop app, model downloader)

LM Studio, the desktop app for running large language models locally, has a path traversal flaw in its model downloader (CVE-2026-119979, CVSS 4.0 8.7 high). Before 0.4.22+1, resolveDownloadRequest accepted backslash-separated traversal filenames, so a crafted model repository could write files outside the models directory. VulnCheck says an attacker who tricks a user into downloading such a model can plant a plugin manifest.json, install-state.json and mcp-bridge-config.json that run an attacker-supplied Python payload every time LM Studio launches. The bug was credited to Ariel Fogel of Pillar Security and is fixed in LM Studio 0.4.22+1.

Progress WS_FTP Server

Progress Software published CVE records on Oct 29 2026 for a batch of WS_FTP Server vulnerabilities on Windows. The worst is CVE-2026-84295 (CVSS 10), improper authentication that could let an unauthenticated remote attacker access sensitive information including administrative credentials, fixed in 2024.0.6 and 2025.0.3. Two OS command injection bugs (CVE-2026-90868, CVSS 9.9, and CVE-2026-90865, CVSS 9.0, the latter with elevated privileges) could allow arbitrary command execution under certain configurations. Other records cover Web Admin console access control (CVE-2026-90867, 8.1), delegated Host Administrator scope escapes and path traversal (CVE-2026-90863, -90864, -90866, all 9.1), server-side script injection in the Manager web console that lets an authenticated Manager administrator run commands as the IIS worker process (CVE-2026-90872, 6.6), MFA bypasses, cleartext password exposure in activity logs, an SSH denial of service and unauthenticated Ad Hoc Transfer issues. Everything is fixed in WS_FTP Server 2024.0.7 and 2025.0.4, released Oct 1 2026. Earlier WS_FTP flaws (CVE-2023-40044) were mass-exploited shortly after disclosure.

Telegram for Android

NebuSec disclosed a flaw in Telegram for Android that let an attacker with an ordinary Telegram account run code on a victim's phone once the victim answered a voice call. The bug was in the code that parses MediaState call messages (mute, camera and video rotation state), which mishandled missing fields and read memory it should not. Versions 8.6.2 through 12.10.3 (March 2022 to September 2026) are affected; Telegram fixed it in 12.10.4, released in late September. NebuSec confirmed it in private calls on ARM64 phones and has no evidence it directly affects the iOS or desktop apps or group calls. There was no CVE identifier as of October 29.

Cisco Catalyst SD-WAN Controller, Manager and Validator

Cisco Talos said on Oct 28 2026 that an APT it tracks as UAT-11473 exploited CVE-2026-20127, the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, Manager and Validator that Cisco fixed in February, and installed a custom malware framework called KeyDrift. Its PolyFlame module is injected into the controller's vdaemon processes as an in-memory backdoor and relay, and its LittleFilch module hooks SSL_read to pull AES-256 key material for a preset list of edge routers out of decrypted control traffic, staging it encrypted for exfiltration. Talos calls the activity historical, says targets included space and satellite services, defense and aerospace technology and policy research, and assesses with high confidence that the group's infrastructure overlaps with Volt Typhoon's Silent Train covert network. There is no workaround; upgrade to a fixed release and check controllers for compromise.

Langflow OSS

IBM published a security bulletin on Oct 28 2026 for Langflow OSS 1.0.0 through 1.12.8, the open source AI workflow builder. It covers an unauthenticated remote code execution flaw (CVE-2026-110186, CVSS 9.8) that IBM says is exploitable through model context protocol tool enumeration, an incomplete fix of the auto-login security control that allows an authentication bypass (CVE-2026-93680, CVSS 9.8), several authenticated code execution bugs (CVSS 8.8), API key exposure, path traversal, and vulnerable bundled dependencies such as Hono. The fix is to upgrade to Langflow OSS 1.13.0 or later; IBM lists no workarounds. Companion IBM bulletins for Langflow OSS add CVE-2026-104339 (CVSS 9.8, unauthenticated OS command injection leading to code execution) and CVE-2026-107328 (CVSS 9.9, authenticated code injection through eval/exec), with the same upgrade-to-1.13.0 fix. A further IBM bulletin adds CVE-2026-107327 (CVSS 9.9, authenticated code execution due to missing authorization, Langflow OSS 1.0.0 through 1.12.4), and another adds CVE-2026-107329 (CVSS 9.9, authenticated code execution through improper control of code generation, same versions).

Cisco Secure Firewall ASA and Secure Firewall Threat Defense (FTD)

Cisco patched CVE-2026-76418 (CVSS 8.6), a denial-of-service bug in the Remote Access SSL VPN service of Secure Firewall ASA and Secure Firewall Threat Defense (FTD) software. Logic errors when secondary authentication is configured on a tunnel group let an unauthenticated, remote attacker send a crafted request while connecting to the SSL VPN and make the device reload; a successful VPN login is not needed. Cisco PSIRT became aware of active exploitation in October 2026 and strongly recommends upgrading. Devices are affected when webvpn is enabled on an interface and a tunnel group (including DefaultWEBVPNGroup) uses secondary-authentication-server-group. There is no workaround, but disabling secondary authentication mitigates it. Shadowserver tracks more than 51,000 internet-exposed ASA SSL VPN devices.

Bitcoin Core

Bitcoin Core published three advisories on Oct 28 2026 for bugs first found by an automated LLM scan (Elias Rohrer's Project Loupe at Spiral) and validated by Gregory Sanders. The worst, rated Medium: on platforms other than Linux, a malicious peer can send TCP urgent (out-of-band) data to bypass read backpressure and queue unlimited data, which Bitcoin Core says lets it "trivially crash any Windows, macOS or BSD node it is connected to". A second Medium bug lets a peer that claims not to support BIP 31 pings stay paused forever while its message queue grows (up to 2MB per hour per inbound peer, 5MB per hour per outbound peer). A Low-severity undo-file overflow lets a miner corrupt other nodes' undo data, impractical on 64-bit systems. All three are fixed in 29.5, 30.4, 31.2 and 32.1 and were disclosed early under Core's new policy for "easily discoverable" bugs.

NoMachine (nxwebrunner / Web Player)

Zero Day Initiative and NoMachine disclosed CVE-2026-114549, a pre-authentication heap buffer overflow in NoMachine's nxwebrunner web service (default TCP 4443). Unauthenticated remote attackers can execute code as the service account (CVSS 3.0 9.8). NoMachine's trouble report says the bug is fixed in 10.1.7, 9.9.6 and 8.27.1 (solved versions published Oct 27 2026); the CVE record was published around Nov 3–4 2026. Affected lines include 8.27 before 8.27.1, 9.9 before 9.9.6 and 10.1 before 10.1.7. Upgrade immediately; until then restrict or disable access to the web player port. No public exploit or CISA KEV listing was reported at publication.

Veeam Backup & Replication 13, Veeam Agent for Linux, Veeam Backup for Microsoft 365 and Veeam ONE

On October 27 Veeam published security bulletins for Backup & Replication 13, Backup for Microsoft 365 and Veeam ONE. The worst is CVE-2026-108142 (CVSS 4.0 9.1, critical): an unauthenticated attacker can bypass authorization on the CDP Coordinator Service of Windows-based Backup & Replication servers and the Veeam Software Appliance, on 13.1.1.18 and earlier 13.1 builds and 13.0.2.29 and earlier 13.0 builds (12.x is not affected). The same bulletin fixes two medium path traversal bugs that let a Restore Operator who controls a backed-up NAS share write files anywhere on the backup server (CVE-2026-108140, CVE-2026-108141) and a high-severity local privilege escalation in Veeam Agent for Linux managed by Backup & Replication (CVE-2026-105477). In Veeam Backup for Microsoft 365, an authenticated organization-transfer peer can inject SQL into the source server's configuration database, leading to cross-tenant read and write of configuration data and code execution as the PostgreSQL service account (CVE-2026-106076, 9.0, critical); other fixes cover arbitrary file reads by an Administrator (CVE-2026-106077), an unauthenticated REST API authentication bypass with a forged federation token (CVE-2026-106078) and an installer file-write bug (CVE-2025-64394). Veeam ONE 13.1 Patch 1 fixes an MFA bypass for attackers who already have Administrator credentials (CVE-2026-107671). Veeam's bulletins do not mention exploitation, but Backup & Replication bugs have repeatedly been exploited by ransomware gangs after disclosure. Update Backup & Replication to 13.1.2 (13.1.2.57) or 13.0.3 (13.0.3.63), Agent for Linux to 13.1.2, Backup for Microsoft 365 to 8.6 Patch 1 (8.6.0.5011) and Veeam ONE to 13.1 P1 (13.1.0.7940).

WatchGuard Fireware OS (Firebox firewalls) and Mobile VPN with SSL client for Windows

On October 27 WatchGuard published 18 advisories: 17 for Fireware OS, the operating system on Firebox firewalls, and one for the Mobile VPN with SSL client for Windows. The worst are a pre-authentication stack buffer overflow in the SIP proxy that lets a remote, unauthenticated attacker run code by sending a crafted request through a policy that uses the SIP proxy (CVE-2026-93857, CVSS 9.2), a pre-authentication integer overflow in Access Portal WebSocket handling that lets an unauthenticated attacker write past a heap buffer when Access Portal is enabled (CVE-2026-93866, 9.2), and a missing-authentication bug in the FireCluster sync daemon that lets an unauthenticated attacker trigger privileged system actions through the FireCluster management IP when clustering is enabled (CVE-2026-93865, 9.2). Other critical bugs need a network position: heap overflows in the Active Directory authentication service reachable by whoever controls or intercepts traffic to the configured AD server (CVE-2026-112709, CVE-2026-112710, 9.2), a stack overflow in the logging service via a crafted certificate from an impersonated log server that gives root (CVE-2026-103593, 9.1), and a stack overflow in WireGuard configuration processing reachable by a man-in-the-middle between the Firebox and WatchGuard Cloud (CVE-2026-103594, 9.5). The rest cover FireCluster privilege escalation and denial of service, an XPath injection in SSH authentication that leaks configuration secrets, an AuthPoint MFA session-hijack bug, root file modification and overwrite, and denial of service in the management interface and certd. WatchGuard says it is not aware of exploitation in the wild for the bugs it lists. Update to Fireware OS 2026.4 or 12.12.4 (12.5.22 on T15 and T35), and Mobile VPN with SSL client to 2026.4.

Avada Website Builder theme for WordPress & WooCommerce (ThemeFusion)

The Avada Website Builder theme for WordPress and WooCommerce (ThemeFusion) lets unauthenticated attackers upload files that may be executable through Avada Forms upload fields, making remote code execution possible (CVE-2026-115346, CVSS 3.1 8.1 high). Wordfence, which reported it, says all versions up to and including 7.16.2 are affected because convert_palette_images_to_truecolor() does not validate file types well enough before processing uploads. Avada fixed the "possible remote code execution vulnerability in Avada Forms upload fields" in Avada Classic 7.16.4 on October 27; the CVE record was published October 30. No exploitation has been reported so far.

Mozilla Firefox and Firefox ESR

Mozilla's October 27 Firefox release fixes 167 CVEs in Firefox 159 (108 rated high, 52 moderate, 7 low), 145 in Firefox ESR 153.6 and 80 in Firefox ESR 115.44. Thirteen of the Firefox 159 fixes are sandbox escapes (in components such as WebRender, Canvas WebGL, XPCOM, Print Preview and Form Manager), and the rest include many use-after-free and JIT bugs in the JavaScript engine, layout, DOM and WebRTC. The large count comes partly from a change in how Mozilla publishes advisories: it no longer rolls internally found memory-safety bugs into one CVE and now issues one per bug. Mozilla's advisories don't mention exploitation in the wild. Update Firefox to 159, or ESR to 153.6 or 115.44.

Microsoft Authenticator for Android

Microsoft Authenticator on Android acts as the sign-in broker for Microsoft apps, and an exported activity in it handed out tokens without checking which app was really asking. A malicious app with zero permissions could claim to be an installed Microsoft app such as Teams and get that app's tokens for the work account signed into Authenticator. Enclave researcher Ofek Levin, who found it, says the tokens gave full delegated mailbox, files and calendar access, and that by posing as Authenticator itself an attacker could change the account's sign-in methods, including adding passkeys that keep access after the app is removed. It needs a malicious app installed on the phone. Microsoft fixed it in September 2026; update Authenticator for Android to 6.2606.4246 or later.

Arista VeloCloud Orchestrator (VCO) On-Prem

Arista patched an actively exploited critical SQL injection flaw (CVE-2026-114625, CVSS 9.9) in on-prem VeloCloud Orchestrator that lets any authenticated user gain operator privileges and masquerade as the local 'superuser operator'. Hosted VCO is already patched; on-prem admins need to upgrade.

HPE Networking (Aruba) wireless OS AOS-8 and AOS-10: Mobility Conductors, Controllers, Gateways, Access Points

HPE Networking patched 72 vulnerabilities in its wireless operating systems AOS-8 and AOS-10 (ArubaOS) on Oct 22 2026 (advisory HPESBNW05162). Eight are rated CVSS 10.0: authentication bypasses, command injection, SQL injection and buffer overflows that let an unauthenticated remote attacker run code on Mobility Conductors, Controllers, Gateways and Access Points, several through the web management interface and the PAPI protocol. HPE urges customers to patch quickly and to restrict management interfaces. It knows of no public exploit code or exploitation.

x402 SDKs (TypeScript @x402/*, Python x402, Go)

V12 disclosed 25 flaws in the x402 agent-payment SDKs, three rated critical: the default client had no spending limit (a hostile API could ask for an agent's whole token balance), the TypeScript Solana facilitator accepted token approvals as payments, and the SIWx login helper signed messages for other websites. All three were fixed in the August 18 releases, but no advisory was published, so npm audit and PyPI don't warn. Update @x402/fetch, @x402/axios, @x402/extensions and @x402/svm to 2.23.0 or later.

Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator

Fortinet shipped a coordinated security hardening release fixing critical and high-severity vulnerabilities found by its frontier AI-assisted testing program. Fixes for FortiMail and FortiAuthenticator came out Oct 21 and for FortiOS, FortiManager and FortiAnalyzer on Oct 22, 2026. CVE IDs and advisories are withheld until Fortinet's November 10 Patch Tuesday, and Fortinet warns attackers can use AI to reverse-engineer the patches, so it urges upgrading now, starting with internet-facing devices.

GitLab CE/EE (self-managed)

GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.

Node.js

Node2Shell (CVE-2026-111497, also written Node 2 Shell) is a Brotli decoder out-of-bounds write in Node.js that can let an attacker run code when an app decompresses attacker-controlled Brotli data: Express 5 / body-parser 2.x request bodies sent with Content-Encoding: br, Brotli responses read by fetch(), or node:zlib on untrusted input. OpenAI Codex Security (Khai Tran and Sylvie Mayer) reported it; Node.js fixed it on Oct 21 2026 in 26.12.1, 24.22.1 and 22.23.4, alongside nine other CVEs (TLS hostname/IP bypasses, DNS NUL truncation) and a CA store refresh for the eMudhra incident. On Oct 22 Imperva Red Team, which coined the name Node2Shell, ran code on the official Node.js 24.22.0 image. NVD lists CVSS 4.0 9.2 (critical); Node.js rates it High. End-of-life lines (Node.js 20, 23, 25 and older) get no fix: upgrade to 26.12.1, 24.22.1 or 22.23.4. Bun is fixed in 1.4.4. On Oct 23 Aikido started calling the wider impact HTTP2Shell: the bug sits in Google Brotli itself, so other software that decodes Brotli needs its own update. Envoy published a critical advisory (GHSA-3wvj-j6qm-62mr) for deployments with a Brotli decompressor configured, fixed in 1.40.0, 1.39.3, 1.38.6 and 1.37.8, and Istio has the fix in 1.29.9, 1.30.6 and 1.31.2. On Oct 25 Microsoft shipped fixes for .NET (8.0.33, 9.0.22, 10.0.14, 11 RC3), Visual Studio 2019/2022/2026 and PowerShell 7.4/7.5/7.6. If you can't patch yet, disable Brotli decoding of untrusted data, and restart services or rebuild images after patching. On Oct 26 PHP shipped Windows builds 8.5.12-1, 8.4.27-1, 8.3.36-1 and 8.2.35-1 with Brotli 1.2.1, since the bundled decoder is reachable through cURL when automatic response decompression is on.

Apple iOS (Safari/WebKit) on out-of-date iPhones

Report URI and iVerify found criminals using 660+ re-registered expired analytics and ad-tag domains (DeadTag), hacked PrestaShop stores and a malicious Instagram ad to silently serve the Coruna (iOS 13 to 17.2.1) and P7 DarkSword (iOS 18.4 to 18.7) exploit kits. Opening an affected page on a vulnerable iPhone is enough; the spyware steals keychain passwords, crypto wallet data and device info. Updated iPhones are protected, so update iOS (or turn on Lockdown Mode if you can't).

Oracle E-Business Suite (Application Object Library)

CVE-2026-101767 (CVSS 9.8) is an unauthenticated SQL injection in the Application Object Library of Oracle E-Business Suite 12.2.3 through 12.2.15, reachable over HTTP through the Thin Client Framework servlet (/OA_HTML/AppsTCFServer). Horizon3.ai, which found it, says it chains to OS command execution as the EBS application account. Oracle fixed it in the October 2026 Critical Patch Update (Oct 20). On Oct 27 Defused said its EBS decoys recorded exploratory exploit attempts. Apply the October CPU patches; until then, remove /OA_HTML/AppsTCFServer from the EBS URL firewall allowlist.

EG Secure Solutions SiteGuard Server Edition

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Added to CISA KEV on 2026-10-20.

Siemens Software Center

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added to CISA KEV on 2026-10-20.

Atlassian Multiple Products

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. Added to CISA KEV on 2026-10-15.

Ahsay AhsayCBS

Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. CISA added CVE-2026-105134, CVE-2026-105133 to the Known Exploited Vulnerabilities catalog on 2026-10-14 based on evidence of active exploitation.

Cisco Secure Email Gateway

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Added to CISA KEV on 2026-10-14.

Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Added to CISA KEV on 2026-10-14.

Adobe Commerce, Magento Open Source, Adobe Commerce B2B

BlockStrap (CVE-2026-103849, CVSS 10.0) is a second-pass email-template directive injection in Adobe Commerce and Magento Open Source that lets an unauthenticated attacker smuggle a {{block}} directive and run PHP code on the store server. It affects versions through 2.4.9 (September builds) and Adobe Commerce B2B through 1.5.3, and closes a gap left by the earlier StyleSmuggler fix. Adobe fixed it in APSB26-153 on Oct 13 as a priority 2 update with no known exploits; Sansec says the rating understates the risk because it found four attack paths within a day and StyleSmuggler went from hotfix to mass exploitation in three days.

Esri ArcGIS Server

A SQL injection in Esri ArcGIS Server 12.1 and earlier on Windows and Linux lets a remote attacker with access to a service issue database-specific functions that should not be allowed. If the service is configured with public access, that includes anonymous attackers. Esri rates it CVSS 3.1 9.8 and fixed it in the ArcGIS Server Security 2026 Update 3 Patch (released Oct 13) for 12.1, 12.0, 11.5, 11.3 and 11.1; older mature or retired versions get no patch and should upgrade to an LTS release.

Fortinet FortiSandbox and FortiSandbox PaaS

Fortinet advisory FG-IR-26-185 describes an authentication bypass using an alternate path or channel (CWE-288) in the FortiSandbox GUI that lets a remote, unauthenticated attacker bypass authentication with crafted HTTP requests and execute unauthorized code or commands. It affects FortiSandbox 5.0.0 through 5.0.6 and 4.4.0 through 4.4.9, and FortiSandbox PaaS 5.0.0 through 5.0.6 and all 4.4 versions; the NVD record also lists FortiSandbox and PaaS 4.2 as affected. Fixes are FortiSandbox 5.0.7 and 4.4.10 (PaaS 5.0.7; PaaS 4.4 users must migrate to a fixed release). The 5.2 line is not affected. Fortinet rates it critical (CVSS 9.6 in the advisory, 9.8 on the CVE record) and says it is not known to be exploited. This is a separate bug from the FortiSandbox command injection CVE-2026-25089 that CISA flagged as exploited in July.

Linux kernel networking (host side of KVM/Firecracker and similar)

Paulos Yibelo / pwn.ai found a Critical Linux networking flaw (CVE-2026-99999, CVSS 9.3) during Vercel’s $1M Sandbox challenge. Guest-controlled checksum metadata can rewrite an IPv4 header after validation, enabling host-memory disclosure and, in lab conditions, guest-to-host code execution on KVM/Firecracker. Upstream fix merged Oct 2026; host kernels need patch + reboot. Affects multi-tenant VPS / sandbox providers more than end-user desktops. Fly.io published an Oct 16 2026 postmortem of a ~10-hour fleet-wide host reboot after the CVE, saying customer data exposure was unlikely but advising rotation of credentials sent over HTTP or unencrypted 6PN between Oct 15 and 17.

Bricksforge (WordPress plugin)

CVE-2026-85097 (CVSS 10.0) in the Bricksforge plugin for the Bricks builder lets unauthenticated attackers run PHP on a WordPress site. Bricksforge checks an upload's MIME type but trusts the url field in temporaryFileUploads at form submission, so attackers fetch a nonce, upload a GIF/PHP polyglot and have it written to a .php path. Patchstack saw exploitation from Oct 7 from 63 IPs. Versions through 3.1.8.9 are affected; update to 3.1.8.10 or later.

SonicWall SMA1000 (6210, 7210, 8200v)

CVE-2026-102255 (CVSS 10.0) is a pre-authentication server-side request forgery in the SMA1000 Appliance Work Place interface: an unintended alternate access path lets a remote attacker make the appliance send requests to internal functionality and perform unauthorized operations. It affects SMA1000 6210, 7210 and 8200v models (not SMA 100 or firewall SSL-VPN). SonicWall disclosed it on Oct 6; exploitation attempts began Oct 8, and Horizon3.ai warns it can lead to device takeover. Update to 12.4.3-03670 or 12.5.0-03082.

Citrix NetScaler

Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. Added to CISA KEV on 2026-10-04.

Zammad GmbH Zammad

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 based on evidence of active exploitation.

Synology DiskStation Manager (DSM)

Since October 2026, 360's anti-ransomware team has handled multiple ransomware attacks on Synology NAS devices by C3RB3R, a variant of the Cerber ransomware family. 360 says the attackers get in through CVE-2026-13639 (insufficient entropy in DSM login logic) and CVE-2026-13684 (improper output encoding in DSM's SCGI), two critical, unauthenticated remote bugs that Synology fixed on Sep 18 2026 in advisory Synology-SA-26:13. Encrypted files get the .L0CK3D extension and a read-me3.txt ransom note is dropped in each folder. Devices that haven't installed the September DSM update are at risk.

Ivanti Connect Secure (ICS)

Volexity observed threat actor UTA0576 chaining an Ivanti Connect Secure authentication-bypass / RCE zero-day (CVE-2026-104935) with additional flaws from about Oct 1–3 2026 to get unauthenticated root on fully patched appliances, re-exploiting in memory without planting webshells. Ivanti patched CVE-2026-104935 on Oct 13; CISA added it to KEV. The chain's privilege-escalation piece, CVE-2026-111357 (dsinvoked trusting DSCache data, root on 22.8R2.4), was added to CISA KEV on Oct 29. On Oct 29 Ivanti also fixed it and the chain's predictable-filename upload bug (CVE-2026-118527) in 25.1.1.3 and 22.8R2.6, so every exploited flaw in the chain now has a fix; patching does not remove an existing compromise.

Fortinet FortiMail

Fortinet FortiMail CVE-2026-104286 (CVSS 9.8) is an unauthenticated arbitrary file write via path traversal / null-byte issues in Identity-Based Encryption web flows. CISA confirmed active exploitation and ordered federal mitigation; Fortinet published FG-IR-26-175 with patches and interim mitigations (disable IBE / restrict admin/webmail).

Citrix NetScaler ADC and NetScaler Gateway

Citrix's CTX697096 bulletin fixes eight NetScaler ADC and Gateway bugs, two of them critical unauthenticated remote code execution zero-days exploited in the wild: CVE-2026-88771 (improper input validation, affects every deployment, no preconditions) and CVE-2026-88772 (memory overflow on appliances with DTLS enabled, which is the default on VPN virtual servers). Both score CVSS 4.0 9.5 and were added to CISA KEV on Sep 27. Attackers chain CVE-2026-88771 with the SAML crash CVE-2026-88779 to get root, plant PHP web shells and steal configs and keys, and exploitation was still being reported in late October. A follow-up SAML bug, CVE-2026-107406, needs newer builds (14.1-73.46 / 13.1-64.29). Patch, then run a compromise assessment: patching does not remove persistence.

Collabora Online - Built-in CODE Server (richdocumentscode) for Nextcloud

An unauthenticated OS command injection in proxy.php of Collabora Online - Built-in CODE Server (richdocumentscode), an optional Nextcloud app, lets attackers run commands on the Nextcloud server whenever the app's local CODE document server isn't running, for example during a restart, an upgrade or after a crash. It was exploited in the wild in September and October 2026 to plant web shells, with the first attack reported on GitHub on Sep 10. Collabora fixed it in richdocumentscode 26.4.303 on Sep 11 and published CVE-2026-110447 (CVSS 4.0 9.2) on Oct 14; it is a different bug from the 2025 proxy RCE CVE-2025-66208. Turning the app off is not enough: update it or remove it. Standalone Collabora Online servers, Docker or distro packages, hosted Collabora, and Nextcloud Office (richdocuments) without the built-in app are not affected. Admins who ran a vulnerable version should also hunt for unexpected PHP files.

Apple iOS (Safari/WebKit) and Chrome for Android

Sekoia reported a large watering-hole campaign it attributes with moderate to high confidence to Russia's APT29. Hacked legitimate sites in the US, Ukraine, Czech Republic and Bulgaria, lookalike domains proxying real sites (America250, Raffles London at The OWO) and a compromised Plerdy analytics tracker (loaded by thousands of mostly Ukrainian sites, Aug 27 to Sep 3 2026) fingerprinted mobile visitors and served exploit chains with no user interaction. iOS 16.7 got a Safari cookie-stealing chain, iOS 18.5 got the DarkSword kit (WhatsApp and Telegram databases, Keychain, location, photos), and Chrome for Android 139 to 145 got AndroSnitch (cookies, saved logins, history, Wi-Fi passwords). Every bug used is already patched and nothing persists after a reboot, so update iOS and Chrome.

VMware ESX / ESXi (also in VMware Cloud Foundation, vSphere Foundation and Telco Cloud Platform)

CISA added CVE-2026-41709, a VMware ESX insufficient logging vulnerability, to its Known Exploited Vulnerabilities catalog on Oct 28 based on evidence of active exploitation. Broadcom rates it Low (CVSSv3 2.7): a malicious administrator could perform certain operations on ESX without them being logged, which helps an attacker who already has admin access hide activity. Broadcom fixed it in VMSA-2026-0006, first published July 29 2026, and credits Ian Barton of CrowdStrike for reporting it. CrowdStrike's 2026 Legal Threat Landscape Report (Oct 28) says the China-nexus adversary WARP PANDA exploited CVE-2026-41709 as a zero-day in several intrusions, as late as early 2026, while deploying malware in VMware vCenter environments at U.S. entities including legal-sector targets.

Palo Alto Networks PAN-OS

An authentication bypass in PAN-OS GlobalProtect (CVE-2026-0257) lets attackers forge an authentication-override cookie and open a VPN session on portals and gateways that accept these cookies with a specific certificate setup. It was patched in May 2026 and added to CISA KEV on May 29. In October Unit 42 said Qilin and Inc ransomware operators are exploiting it on unpatched devices, bypassing MFA to get a VPN foothold and in one case pivoting to vCenter and ESXi to dump domain credentials. Group-IB and NyxLab tied it to the k0t initial-access campaign, which collected over 70,000 firewall and LDAP credentials. Patch, or use a dedicated certificate for authentication override cookies, or disable authentication override.

Linux kernel (IPsec ESP-in-TCP receive path, skb_try_coalesce)

CISA added CVE-2026-46300, the Linux kernel local privilege escalation known as Fragnesia, to its Known Exploited Vulnerabilities catalog on Oct 28 based on evidence of active exploitation. The bug is in skb_try_coalesce(), which loses the shared-frag marker when TCP receive coalescing moves paged frags, so IPsec ESP-in-TCP input can decrypt in place over page-cache-backed pages. A low-privileged local user can use it to write bytes into read-only files such as system binaries and gain root. Fragnesia was disclosed on oss-security on May 13 2026 as a Dirty Frag class exploit found by William Bowling with the V12 team, and fixed stable kernels have been out since then. On Oct 27 Dream Research reported a campaign that chained a PHP2Shell exploit with Fragnesia to root 25 servers, including 24 perimeter firewalls.