{"date_iso":"2026-10-13","date_human":"Tuesday, October 13, 2026","generated_utc":"2026-10-13 12:57 UTC","read_minutes":4,"patch_tuesday":true,"top_stories":[{"title":"CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab","link":"https://www.rapid7.com/blog/post/etr-cve-2026-97229-critical-unauthenticated-remote-code-execution-in-gitlab","reason":"Gitlab","category":"Research","sources":["Bleeping Computer","Rapid7 Blog","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-97229"],"summary":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE)\u2026","source":"Rapid7 Blog","date_rel":"1h ago","thumbnail":"https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp","description":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0 . Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in\u2026","related":[{"title":"GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code","link":"https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html","source":"The Hacker News","date_rel":"4h ago"},{"title":"GitLab warns of max severity code execution vulnerability","link":"https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/","source":"Bleeping Computer","date_rel":"23h ago"}]},{"title":"Amazon Fire TV Cube 3 Exploit Enables Root Access and Bootloader Unlock","link":"https://cybersecuritynews.com/amazon-fire-tv-cube-3-exploit/","reason":"Amazon","category":"News","sources":["Cyber Security News","Malwarebytes Labs","The Hacker News"],"coverage":3,"cve_ids":[],"summary":"A public exploit package now lets owners of Amazon\u2019s third-generation Fire TV Cube gain persistent root access and unlock the bootloader on firmware PS7717 or older. Released by XDA developer Pro-me3us, the project\u2026","source":"Cyber Security News","date_rel":"3h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Amazon-Fire-TV-Cube-3-Exploit-Enables-Root-Access-and-Bootloader-Unlock.webp","description":"A public exploit package now lets owners of Amazon\u2019s third-generation Fire TV Cube gain persistent root access and unlock the bootloader on firmware PS7717 or older. Released by XDA developer Pro-me3us, the project targets devices known as \u201cgazelle\u201d. It combines temporary root access with a separate bootloader flaw to enable deeper system changes. According to the XDA development thread , the unlock installs Magisk and TWRP recovery, opens restricted boot options, and supports alternative operating systems. However, the developer warns that the process can permanently damage the device. It\u2026","related":[{"title":"Bring Your Own Agent: Your Employees' Assistants Are Already Logged In","link":"https://thehackernews.com/2026/10/bring-your-own-agent-your-employees.html","source":"The Hacker News","date_rel":"12 Oct"},{"title":"A week in security (October 5 \u2013 October 11)","link":"https://www.malwarebytes.com/blog/news/2026/10/a-week-in-security-october-5-october-11","source":"Malwarebytes Labs","date_rel":"12 Oct"}]},{"title":"Retail giant Ahold Delhaize takes systems offline after cyberattack","link":"https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/","reason":"Cyberattack Delhaize Systems","category":"News","sources":["Bleeping Computer","SecurityWeek"],"coverage":2,"cve_ids":[],"summary":"Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a \"cybersecurity incident\" affecting its network.","source":"Bleeping Computer","date_rel":"23h ago","thumbnail":"","description":"","related":[{"title":"Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems","link":"https://www.securityweek.com/cyberattack-prompts-ahold-delhaize-to-disconnect-systems/","source":"SecurityWeek","date_rel":"3h ago"}]},{"title":"IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion","link":"https://cyberscoop.com/ionq-acquires-elisity-1-3-billion-quantum-security/","reason":"Elisity Billion Ionq","category":"News","sources":["CyberScoop","SecurityWeek"],"coverage":2,"cve_ids":[],"summary":"IonQ announced Monday that it will acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion that folds enterprise access control into the quantum computing company\u2019s\u2026","source":"CyberScoop","date_rel":"18h ago","thumbnail":"","description":"IonQ announced Monday that it will acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion that folds enterprise access control into the quantum computing company\u2019s expanding cybersecurity business. Elisity, founded in 2019, sells a software policy layer that governs which users, devices, workloads and AI agents can communicate across a network, independent of the underlying network technology. The California-based company reports more than 100 global deployments and says revenue and customer counts have doubled year over year, with no\u2026","related":[{"title":"IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion","link":"https://www.securityweek.com/ionq-to-acquire-zero-trust-firm-elisity-for-up-to-1-3-billion/","source":"SecurityWeek","date_rel":"22h ago"}]},{"title":"Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE","link":"https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html","reason":"CVE-2026-85097","category":"News","sources":["SecurityWeek","The Hacker News"],"coverage":2,"cve_ids":["CVE-2026-85097"],"summary":"A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS\u2026","source":"The Hacker News","date_rel":"12 Oct","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrKeT1xQm0N8zjNRqWwsoqMm3kESRMqYnUJ9Wy6x9dEKlRVgZYDVqKqhu_2ZT7ZcCNd_RegNu2LtnUUQgL8R2OlK5LTyu9vKaCBRGTVrp05hGdB5wQrxFNi_eHnGxx-8yFR7maKT3tD_WBMVVBSeTyuku392tKdoOHIgvnj1tKQYU_Yq9anT5OKxUun4GW/s1600/wp-php.jpg","description":"A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The","related":[{"title":"Bricksforge WordPress Plugin Vulnerability Exploited in the Wild","link":"https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/","source":"SecurityWeek","date_rel":"23h ago"}]}],"worth_reading":[],"kev_watch":[],"vuln_watch":[{"id":"CVE-2026-108892","vendor":"Linksys","product":"E1700","severity":"CRITICAL","score":10.0,"description":"A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newap_text_%d causes stack\u2026","cwe":"CWE-119","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_66/66.md","https://vuldb.com/cve/CVE-2026-108892","https://vuldb.com/submit/973111"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108892"},{"id":"CVE-2026-108907","vendor":"Netcore","product":"NR268","severity":"CRITICAL","score":10.0,"description":"A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been public\u2026","cwe":"CWE-287","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/draw-ctf/report/blob/main/NR268/2026.09.14-netcore-nr268-boa-auth-fail-open.md","https://vuldb.com/cve/CVE-2026-108907","https://vuldb.com/submit/977173"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108907"},{"id":"CVE-2026-108917","vendor":"Edimax","product":"BR-6208AC","severity":"CRITICAL","score":10.0,"description":"A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be per\u2026","cwe":"CWE-74","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formAutoFWupgrade","https://vuldb.com/cve/CVE-2026-108917","https://vuldb.com/submit/977199"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108917"},{"id":"CVE-2026-108918","vendor":"Edimax","product":"BR-6208AC","severity":"CRITICAL","score":10.0,"description":"A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. Th\u2026","cwe":"CWE-74","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formWlanMP","https://vuldb.com/cve/CVE-2026-108918","https://vuldb.com/submit/977200"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108918"},{"id":"CVE-2026-89111","vendor":"SAP","product":"SAP Cloud","severity":"CRITICAL","score":10.0,"description":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing\u2026","cwe":"CWE-918","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","fix":false,"fix_url":"","refs":["https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2","https://url.sap/sapsecuritypatchday"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-89111"},{"id":"CVE-2026-97229","vendor":"GitLab","product":"GitLab","severity":"CRITICAL","score":10.0,"description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code o\u2026","cwe":"CWE-190","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","https://gitlab.com/gitlab-org/gitlab/-/work_items/630686","https://hackerone.com/reports/4055749"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-97229"},{"id":"CVE-2026-109109","vendor":"Wavlink","product":"WL-WN530BE1-A","severity":"CRITICAL","score":10.0,"description":"A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COO\u2026","cwe":"CWE-119","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://gist.github.com/Rauzk/9ef4fe7574e5689386cc43139f4cf9e1","https://vuldb.com/cve/CVE-2026-109109","https://vuldb.com/submit/909191"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-109109"},{"id":"CVE-2026-108893","vendor":"Linksys","product":"E1700","severity":"CRITICAL","score":9.9,"description":"A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack may be launc\u2026","cwe":"CWE-119","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_67/67.md","https://vuldb.com/cve/CVE-2026-108893","https://vuldb.com/submit/973112"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108893"},{"id":"CVE-2026-108894","vendor":"Linksys","product":"E1700","severity":"CRITICAL","score":9.9,"description":"A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument staticRoute_IP_set\u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_68/68.md","https://vuldb.com/cve/CVE-2026-108894","https://vuldb.com/submit/973113"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108894"},{"id":"CVE-2026-108895","vendor":"Linksys","product":"E1700","severity":"CRITICAL","score":9.9,"description":"A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC_addr can lead to os command injection. The attack can be execu\u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_69/69.md","https://vuldb.com/cve/CVE-2026-108895","https://vuldb.com/submit/973114"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108895"}],"vendor_spikes":[{"vendor":"frappe","count":84,"critical_count":0},{"vendor":"IBM","count":61,"critical_count":6},{"vendor":"Progress","count":34,"critical_count":5},{"vendor":"Microsoft","count":30,"critical_count":1},{"vendor":"ImageMagick","count":25,"critical_count":0},{"vendor":"GitLab","count":24,"critical_count":1},{"vendor":"SAP","count":20,"critical_count":4},{"vendor":"FreeRDP","count":16,"critical_count":0},{"vendor":"open-webui","count":15,"critical_count":0},{"vendor":"Unknown","count":14,"critical_count":0}],"epss_risers":[],"developing_map":{},"trending_count":5,"new_cve_count":693,"has_news_data":true,"has_cve_data":true,"news_for_cve":{"CVE-2026-97229":{"anchor":"#dev-1","rank":1,"coverage":3},"CVE-2026-85097":{"anchor":"#dev-5","rank":5,"coverage":2}}}