Wednesday, October 14, 2026 · generated · about 6 min read
Morning Brief
Patch today vendors with the most new CVEs today
- Microsoft 63 critical 1438
- Adobe 26 critical 177
- Mozilla 2 critical 83
- WordPress 7 critical 43
- Google 38
- Siemens 4 critical 32
- Unknown 2 critical 28
- FreeRDP 21
- Omnispace 1 critical 21
- NVIDIA 2 critical 18
Ranked by CVE count. Each vendor opens the CVE Feed filtered to that vendor and these dates.
Top developments ranked by cross-source trending
-
Image: Cyber Security News Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks
Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as CVE-2026-85851, the flaw was disclosed on October 13, 2026, and carries a CVSS base score of 7.8. Microsoft rates it Important. The issue involves a use-after-free memory error and affects several Windows 11 releases and Windows Server 2025. According to the supplied Microsoft advisory, successful exploitation lets an attacker move from a low integrity level to a medium integrity level. This is a specific increase in access, not a confirmed path…
Also in Malwarebytes Labs Bleeping Computer Infosecurity Magazine +3
CVE-2026-83500 ↗CVE-2026-85851 ↗CVE-2026-85920 ↗View on Security Feed
-
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Also in The Hacker News Cyber Security News CyberScoop +3
-
Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People
Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta employees in the United States, according to the company’s disclosure to SecurityWeek. Meta confirmed the breach on October 13, 2026, when it began notifying affected people. The company said it detected the intrusion several weeks earlier, blocked the attackers’ access, and brought in GitHub and law enforcement to support its response. Stolen Credentials Opened Repository Access Meta…
Also in Any.Run Malware Analysis The Hacker News SecurityWeek
-
Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server
A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS) infrastructure. The case shows how stolen login details and weak access controls can put a bank’s central software systems at risk without a complex attack chain. The bank’s security team uncovered unauthorized VPN access attempts stretching across several months after spotting unusual activity on its central IT system. Investigators traced the intrusion to an external gateway managed by a third party, where strict authentication had not been…
Also in The Hacker News Bleeping Computer Microsoft Security +2
CVE-2026-105725 ↗CVE-2026-108457 ↗CVE-2026-108468 ↗View on Security Feed
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,
Also in SecurityWeek Bleeping Computer CCCS Alerts & Advisories
-
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It's the CFO, or it sounds exactly like her, asking the controller to push a supplier payment out before the weekend because a deal closes
Also in Wiz Research Infosecurity Magazine
-
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $
Also in Cyber Security News Cyber Security News SecurityWeek +1
-
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-day vulnerability. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirms…
Also in SecurityWeek CISA Alerts & Advisories CISA Alerts & Advisories
-
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0 . Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in…
-
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
Also in CCCS Alerts & Advisories
Vulnerability watch what to look at, most urgent first
| Details | CVE | Product | Severity | CVSS | EPSS | KEV | Fix | In the news | |
|---|---|---|---|---|---|---|---|---|---|
| Highest scoring today 10new CVEs, highest CVSS first | |||||||||
| CVE-2026-109109 | WL-WN530BE1-AWavlink | Critical | 10.0 | 0.6% | — | None linked | — | EPSS 0.6%CVSS 10.0No fix linked | |
What it isA vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COO… Attack
Exploitation
|
|||||||||
| CVE-2026-109110 | WL-WN592AX6Wavlink | Critical | 10.0 | 2% | — | None linked | — | EPSS 2%CVSS 10.0No fix linked | |
What it isA flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit … Attack
Exploitation
|
|||||||||
| CVE-2026-65162 | AIStore frameworkNVIDIA | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isNVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code ex… Attack
Exploitation
|
|||||||||
| CVE-2024-34323 | Unknown | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request. Attack
Exploitation
|
|||||||||
| CVE-2026-55675 | docssaltyorg | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isThe Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, a… Attack
Exploitation
|
|||||||||
| CVE-2026-94603 | podmanCheck Point | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isPodman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con… Attack
Exploitation
|
|||||||||
| CVE-2026-103849 | Adobe CommerceAdobe | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isAdobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or co… Attack
Exploitation
|
|||||||||
| CVE-2026-110130 | dockhandFinsys | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isDockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for u… Attack
Exploitation
|
|||||||||
| CVE-2026-48382 | Adobe Experience Manager as a Cloud ServiceAdobe | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or s… Attack
Exploitation
|
|||||||||
| CVE-2026-48383 | Adobe Experience Manager as a Cloud ServiceAdobe | Critical | 10.0 | — | — | None linked | — | CVSS 10.0No fix linked | |
What it isAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or s… Attack
Exploitation
|
|||||||||
Click a row, or press +, to expand it.EPSS is FIRST's estimated chance of exploitation in the next 30 days.Full CVE Feed
Worth reading quieter, still worth your time
-
Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild. Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low. This month’s update includes patches for 301 products and components. The following table lists the products with the most CVEs patched this month. A…
Also in SecurityWeek
Assembled automatically, once a day, from data the Security Feed and CVE Feed already collect and score. No AI writes any of this, and every number traces back to something already published on those two tools.
Top developments come from the Security Feed's cross-source trending detection. Vulnerability watch comes from the CVE Feed's daily NVD and CISA KEV sync.