Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 ... Read more
Published Date: Oct 14, 2026 (2 hours, 25 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-96951 CVE-2026-108398 CVE-2026-92707 CVE-2026-214131,411 Vulnerabilities and Three Zero-DaysStudy SecurityAn actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch managem ... Read more
Published Date: Oct 14, 2026 (6 hours, 4 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102855 CVE-2026-97749 CVE-2026-97016 CVE-2026-96951 CVE-2026-70571 CVE-2026-70291 CVE-2026-70242 CVE-2026-70229 CVE-2026-108398 CVE-2026-102857 CVE-2026-102856 CVE-2026-100214 CVE-2026-92707 CVE-2026-97229Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, including one exploited zero-day vulnerability, two publicly disclosed zero-day vulnerabilities, and 75 Critical ... Read more
Published Date: Oct 14, 2026 (6 hours, 54 minutes ago)Vulnerabilities has been mentioned in this article.
Source: China Photos via Getty ImagesAs we progress further into the AI-driven "vulnpocalypse era," Microsoft’s October 2026 Patch Tuesday security update blows past last month’s record for the number ... Read more
Published Date: Oct 13, 2026 (8 hours, 30 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-65674 CVE-2026-96951 CVE-2026-70242 CVE-2026-108398 CVE-2026-105016 CVE-2026-102866 CVE-2026-21413A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it fou ... Read more
Published Date: Oct 13, 2026 (12 hours, 57 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105445An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for ... Read more
Published Date: Oct 13, 2026 (13 hours, 27 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-109412 CVE-2026-106042 CVE-2026-104935A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ... Read more
Published Date: Oct 13, 2026 (13 hours, 31 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-89111Ivanti waarschuwt klanten voor actief misbruik van een kwetsbaarheid in Ivanti Connect Secure vpn-servers. Via het beveiligingslek (CVE-2026-104935) kan een ongeauthenticeerde aanvaller willekeurige c ... Read more
Published Date: Oct 13, 2026 (15 hours, 59 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-104935De Franse overheid adviseert supermarkten en andere bedrijven om hun koelsystemen offline te halen. In het geval van gehackte koelinstallaties wordt aangeraden om een fabrieksreset uit te voeren. Volg ... Read more
Published Date: Oct 13, 2026 (19 hours, 18 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2025-41451 CVE-2025-41450Vulnerability in Payload CMS software CVE ID CVE-2026-63316 Publication date 13 October 2026 Vendor Payload Product Payload CMS Vulnerable versions All before 3.90.0From 4.0.0-canary.0 to 4.0.0-canary ... Read more
Published Date: Oct 13, 2026 (20 hours, 5 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-63316GitLab waarschuwt ontwikkelaars en organisaties voor een kritieke kwetsbaarheid in de software die een CVSS-impactscore van 10.0 op een schaal van 1 tot en met 10 heeft. GitLab is een populaire online ... Read more
Published Date: Oct 13, 2026 (21 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-97229Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The ... Read more
Published Date: Oct 13, 2026 (22 hours, 11 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2025-41452 CVE-2025-41451 CVE-2025-41450Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. ... Read more
Published Date: Oct 13, 2026 (22 hours, 16 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-85975 CVE-2026-85972 CVE-2026-85964 CVE-2026-85963 CVE-2026-85962 CVE-2026-85961 CVE-2026-85960 CVE-2026-85959 CVE-2026-85958 CVE-2026-85957 CVE-2026-9191 CVE-2026-85956 CVE-2026-85955 CVE-2026-85954 CVE-2026-85953 CVE-2026-85952 CVE-2026-85951 CVE-2026-85949 CVE-2026-85948 CVE-2026-85947 CVE-2026-9192GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has re ... Read more
Published Date: Oct 13, 2026 (22 hours, 16 minutes ago)Vulnerabilities has been mentioned in this article.
CVE-2026-97229 CVE-2026-92883 CVE-2026-16301 CVE-2026-14814 CVE-2026-90970 CVE-2026-85706Rob Wright,Senior News Director,Dark ReadingOctober 12, 20264 Min ReadSource: Michael Vi via Alamy Stock PhotoSonicWall customers are on the defensive once again, as threat actors are actively exploit ... Read more
Published Date: Oct 12, 2026 (1 day, 9 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102255 CVE-2026-15410 CVE-2026-15409Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone d ... Read more
Published Date: Oct 12, 2026 (1 day, 15 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-85097 CVE-2026-76284 CVE-2026-76282 CVE-2026-76281 CVE-2026-76268 CVE-2026-76501 CVE-2026-76500 CVE-2026-76499 CVE-2026-76498 CVE-2026-76486 CVE-2026-76485 CVE-2026-76483 CVE-2026-76482 CVE-2026-76480 CVE-2026-76471 CVE-2026-76465 CVE-2026-76464 CVE-2026-76459 CVE-2026-76455 CVE-2026-76454 CVE-2026-20328 CVE-2026-102255 CVE-2026-105192 CVE-2026-58069 CVE-2025-64393 CVE-2026-103008 CVE-2026-102413 CVE-2026-102406 CVE-2026-102404 CVE-2026-86362 CVE-2026-86361 CVE-2026-86360 CVE-2026-106382 CVE-2026-106358 CVE-2026-106347 CVE-2026-106197 CVE-2026-91140 CVE-2026-21589 CVE-2026-104714 CVE-2026-104713 CVE-2026-104712 CVE-2026-104711 CVE-2026-63277 CVE-2026-105134 CVE-2026-105133 CVE-2026-96940 CVE-2026-59265 CVE-2026-18397 CVE-2026-102490 CVE-2026-102489 CVE-2026-93355 CVE-2026-84388 CVE-2026-93836 CVE-2026-94504 CVE-2026-47483 CVE-2026-32740October 12, 2026GitLab has addressed CVE-2026-97229, a critical vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute arbitrary code on a vulne ... Read more
Published Date: Oct 12, 2026 (1 day, 16 hours ago)Vulnerabilities has been mentioned in this article.
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tra ... Read more
Published Date: Oct 12, 2026 (1 day, 20 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102255 CVE-2026-15410 CVE-2026-15409A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2 ... Read more
Published Date: Oct 12, 2026 (1 day, 21 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-85097 CVE-2026-93836 CVE-2026-94504 CVE-2025-3102 CVE-2016-15042 CVE-2024-28000 CVE-2023-28121 CVE-2019-9879Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastru ... Read more
Published Date: Oct 12, 2026 (1 day, 23 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-63030 CVE-2026-60137 CVE-2026-0257 CVE-2026-4815 CVE-2024-1086 CVE-2023-7028 CVE-2022-28368 CVE-2021-4034 CVE-2020-1938Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on- ... Read more
Published Date: Oct 09, 2026 (4 days, 14 hours ago)Vulnerabilities has been mentioned in this article.
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California compa ... Read more
Published Date: Oct 09, 2026 (4 days, 17 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2025-30241 CVE-2025-30240 CVE-2025-30239 CVE-2025-30238 CVE-2025-30237 CVE-2023-50224vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: Vandaag, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een maximale CVSS-impactscore van 10.0, wordt a ... Read more
Published Date: Oct 09, 2026 (4 days, 18 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102255vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: 09-10-2026, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een maximale CVSS-impactscore van 10.0, word ... Read more
Published Date: Oct 09, 2026 (4 days, 18 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102255Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. ... Read more
Published Date: Oct 09, 2026 (4 days, 18 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2025-27918Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Deta ... Read more
Published Date: Oct 09, 2026 (4 days, 14 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105134 CVE-2026-105133 CVE-2026-88772Aanvallers maken actief misbruik van twee kwetsbaarheden in Ahsay Cloud Backup Server (CBS) voor het hacken van organisaties en beveiligingsupdates zijn nog niet beschikbaar. Dat meldt cybersecuritybe ... Read more
Published Date: Oct 09, 2026 (4 days, 12 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105134 CVE-2026-105133The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked thr ... Read more
Published Date: Oct 09, 2026 (4 days, 8 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2023-22894 CVE-2021-22205 CVE-2021-3199 CVE-2019-11510 CVE-2016-3081 CVE-2015-5477 CVE-2015-3306 CVE-2014-6278Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show ... Read more
Published Date: Oct 09, 2026 (4 days, 12 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2026-58704Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain con ... Read more
Published Date: Oct 09, 2026 (4 days, 8 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-107406 CVE-2026-88772Citrix waarschuwt voor een nieuwe kritieke kwetsbaarheid in Citrix NetScaler ADC en Citrix NetScaler Gateway die remote code execution mogelijk maakt en tot een denial of service kan leiden. Klanten w ... Read more
Published Date: Oct 09, 2026 (4 days, 9 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-107406Executive SummaryCitrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway under specific SAML authentication configurations. ... Read more
Published Date: Oct 09, 2026 (4 days, 14 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-107406 CVE-2026-102255 CVE-2026-21589Acknowledgements: Special thanks to Dipo Rodipe, John Hammond, Susannah Matt, Ben Nahorney, and Lindsey Welch for their contributions to this investigation and writeup. Update 10/8/26 @ 6pm ETAfter fu ... Read more
Published Date: Oct 08, 2026 (4 days, 16 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105134 CVE-2026-105133Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agenc ... Read more
Published Date: Oct 08, 2026 (4 days, 16 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2023-22894 CVE-2021-22205 CVE-2021-3199 CVE-2019-11510 CVE-2016-3081 CVE-2015-5477 CVE-2015-3306 CVE-2014-6278Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Toky ... Read more
Published Date: Oct 08, 2026 (4 days, 19 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2026-72898A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway.Tracked as CVE-2026-102255, ... Read more
Published Date: Oct 08, 2026 (4 days, 7 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102255 CVE-2026-21589 CVE-2026-88779 CVE-2026-83548 CVE-2026-15409 CVE-2026-1022Google heeft een beveiligingsupdate voor Pixel-telefoons uitgebracht die meerdere beveiligingslekken verhelpt, waaronder een kritieke bluetooth-kwetsbaarheid. Van de in totaal zes kwetsbaarheden in he ... Read more
Published Date: Oct 08, 2026 (4 days, 11 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-55330Vulnerability in Ollama software CVE ID CVE-2026-103663 Publication date 08 October 2026 Vendor Ollama Product Ollama Vulnerable versions From 0.34.2 to 0.35.0 Vulnerability type (CWE) Relative Path T ... Read more
Published Date: Oct 08, 2026 (4 days, 12 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-103663Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign ... Read more
Published Date: Oct 07, 2026 (5 days, 5 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2026-63030 CVE-2026-60137SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker ... Read more
Published Date: Oct 07, 2026 (5 days, 2 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-102258 CVE-2026-102257 CVE-2026-102256 CVE-2026-102255 CVE-2026-88772 CVE-2026-83549 CVE-2026-83548 CVE-2026-15410 CVE-2026-15409A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed ... Read more
Published Date: Paź 07, 2026 (5 dni, 1 godzina ago)Vulnerabilities has been mentioned in this article.
CVE-2026-105192 CVE-2026-105756 CVE-2026-88772Executive SummaryAtlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products.The vulnerability carries a CVSS v4.0 score of ... Read more
Published Date: Oct 07, 2026 (4 days, 22 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-21589 CVE-2026-88779 CVE-2026-90970Een kritieke kwetsbaarheid in producten van Atlassian, waardoor aanvallers toegang tot bestanden en gevoelige informatie kunnen krijgen, wordt misbruikt bij aanvallen, zo meldt cybersecuritybedrijf Pr ... Read more
Published Date: Oct 07, 2026 (4 days, 23 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-21589Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary ... Read more
Published Date: Oct 07, 2026 (4 days, 21 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-21589 CVE-2026-88772Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifi ... Read more
Published Date: Oct 07, 2026 (2 days, 10 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2026-61500 CVE-2026-26980Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detecti ... Read more
Published Date: Oct 06, 2026 (3 days ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88772 CVE-2023-7102 CVE-2023-2868Over the last several days, our Research Team has continued to analyze artifacts associated with the exploitation of Citrix NetScaler CVE-2026-88771 and CVE-2026-88772. As more samples, technical repo ... Read more
Published Date: Oct 06, 2026 (3 days, 1 hour ago)Vulnerabilities has been mentioned in this article.
Softwarebedrijf Atlassian waarschuwt voor een kritieke kwetsbaarheid in verschillende producten waardoor ongeauthenticeerde aanvallers toegang tot willekeurige bestanden in de root directory van de we ... Read more
Published Date: Oct 06, 2026 (3 days, 2 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-21589A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either ... Read more
Published Date: Oct 06, 2026 (3 days, 2 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-63277 CVE-2026-59265 CVE-2026-88772October 6, 2026Executive SummaryMicrosoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authent ... Read more
Published Date: Oct 06, 2026 (3 days, 2 hours ago)Vulnerabilities has been mentioned in this article.
CVE-2026-88779 CVE-2026-96940 CVE-2026-90970 CVE-2026-104286 CVE-2026-76504