{"date_iso":"2026-10-14","date_human":"Wednesday, October 14, 2026","generated_utc":"2026-10-14 12:57 UTC","read_minutes":6,"patch_tuesday":false,"top_stories":[{"title":"Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks","link":"https://cybersecuritynews.com/windows-smartscreen-escalation-vulnerability/","reason":"Microsoft","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","Cisco Talos","Cyber Security News","Dark Reading","Infosecurity Magazine","Krebs On Security","Malwarebytes Labs","Rapid7 Blog","SANS Internet Storm Center","The Hacker News"],"coverage":11,"cve_ids":["CVE-2026-83500","CVE-2026-85851","CVE-2026-85920","CVE-2026-88070"],"summary":"Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as CVE-2026-85851, the flaw was disclosed on October 13, 2026, and\u2026","source":"Cyber Security News","date_rel":"3h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Windows-SmartScreen-Vulnerability-Enables-Privilege-Escalation-Attacks.webp","description":"Microsoft has released fixes for a Windows SmartScreen vulnerability that allows an attacker with local access to gain higher privileges. Tracked as CVE-2026-85851, the flaw was disclosed on October 13, 2026, and carries a CVSS base score of 7.8. Microsoft rates it Important. The issue involves a use-after-free memory error and affects several Windows 11 releases and Windows Server 2025. According to the supplied Microsoft advisory, successful exploitation lets an attacker move from a low integrity level to a medium integrity level. This is a specific increase in access, not a confirmed path\u2026","related":[{"title":"Update Windows: Record Patch Tuesday fixes flaw already under attack","link":"https://www.malwarebytes.com/blog/bugs/2026/10/update-windows-record-patch-tuesday-fixes-flaw-already-under-attack","source":"Malwarebytes Labs","date_rel":"1h ago"},{"title":"Microsoft: Recent Windows updates may trigger Remote Desktop failures","link":"https://www.bleepingcomputer.com/news/security/microsoft-recent-windows-updates-may-trigger-remote-desktop-failures/","source":"Bleeping Computer","date_rel":"2h ago"},{"title":"Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs","link":"https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record-1/","source":"Infosecurity Magazine","date_rel":"4h ago"},{"title":"Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks","link":"https://cybersecuritynews.com/windows-bitlocker-bypass-vulnerabilities/","source":"Cyber Security News","date_rel":"5h ago"},{"title":"Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug","link":"https://thehackernews.com/2026/10/microsoft-patches-record-1413-flaws.html","source":"The Hacker News","date_rel":"8h ago"},{"title":"Microsoft Patches More Than 1,400 Security Flaws","link":"https://krebsonsecurity.com/2026/10/microsoft-patches-more-than-1400-security-flaws/","source":"Krebs On Security","date_rel":"13h ago"}]},{"title":"CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records","link":"https://therecord.media/new-ivanti-microsoft-bugs-exploitation","reason":"Ivanti","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","Cyber Security News","CyberScoop","The Hacker News","The Record","Volexity"],"coverage":7,"cve_ids":[],"summary":"The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.","source":"The Record","date_rel":"21m ago","thumbnail":"http://cms.therecord.media/uploads/cisa_code_background_cdd6a475aa.jpg","description":"","related":[{"title":"CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts","link":"https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.html","source":"The Hacker News","date_rel":"26m ago"},{"title":"Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials","link":"https://cybersecuritynews.com/ivanti-connect-secure/","source":"Cyber Security News","date_rel":"5h ago"},{"title":"Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day","link":"https://cyberscoop.com/ivanti-connect-secure-zero-day-actively-exploited/","source":"CyberScoop","date_rel":"14h ago"},{"title":"Ivanti security advisory (AV26-1035)","link":"https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035","source":"CCCS Alerts & Advisories","date_rel":"17h ago"},{"title":"Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far","link":"https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html","source":"The Hacker News","date_rel":"19h ago"},{"title":"Ivanti warns of Connect Secure zero-day exploited in attacks","link":"https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/","source":"Bleeping Computer","date_rel":"21h ago"}]},{"title":"Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People","link":"https://cybersecuritynews.com/hackers-breach-meta-github-repositories/","reason":"Github","category":"News","sources":["Any.Run Malware Analysis","Cyber Security News","SecurityWeek","The Hacker News"],"coverage":4,"cve_ids":[],"summary":"Hackers used an employee\u2019s stolen credentials to access some of Meta\u2019s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta\u2026","source":"Cyber Security News","date_rel":"4h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Hackers-Breach-Meta-GitHub-Repositories.webp","description":"Hackers used an employee\u2019s stolen credentials to access some of Meta\u2019s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta employees in the United States, according to the company\u2019s disclosure to SecurityWeek. Meta confirmed the breach on October 13, 2026, when it began notifying affected people. The company said it detected the intrusion several weeks earlier, blocked the attackers\u2019 access, and brought in GitHub and law enforcement to support its response. Stolen Credentials Opened Repository Access Meta\u2026","related":[{"title":"Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot","link":"https://any.run/cybersecurity-blog/fake-ai-tools-us-companies/","source":"Any.Run Malware Analysis","date_rel":"3h ago"},{"title":"GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking","link":"https://thehackernews.com/2026/10/github-tightens-npm-publishing-after.html","source":"The Hacker News","date_rel":"20h ago"},{"title":"Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach","link":"https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/","source":"SecurityWeek","date_rel":"20h ago"}]},{"title":"Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server","link":"https://cybersecuritynews.com/attackers-breach-european-bank/","reason":"Windows","category":"News","sources":["Bleeping Computer","Cyber Security News","Microsoft Security","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-105725","CVE-2026-108457","CVE-2026-108468"],"summary":"A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS) infrastructure. The case shows how stolen login details and weak\u2026","source":"Cyber Security News","date_rel":"4h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Attackers-Breach-European-Bank-Through-Third-Party-Gateway-and-Target-WSUS-Server.webp","description":"A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS) infrastructure. The case shows how stolen login details and weak access controls can put a bank\u2019s central software systems at risk without a complex attack chain. The bank\u2019s security team uncovered unauthorized VPN access attempts stretching across several months after spotting unusual activity on its central IT system. Investigators traced the intrusion to an external gateway managed by a third party, where strict authentication had not been\u2026","related":[{"title":"Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave","link":"https://thehackernews.com/2026/10/four-byte-write-and-timing-bug-let.html","source":"The Hacker News","date_rel":"7h ago"},{"title":"The MFA Gaps Attackers are Still Exploiting","link":"https://www.bleepingcomputer.com/news/security/the-mfa-gaps-attackers-are-still-exploiting/","source":"Bleeping Computer","date_rel":"22h ago"},{"title":"CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725","source":"Microsoft Security","date_rel":"22h ago"},{"title":"CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108457","source":"Microsoft Security","date_rel":"22h ago"},{"title":"CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108468","source":"Microsoft Security","date_rel":"22h ago"}]},{"title":"SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft","link":"https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html","reason":"Sap","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","SecurityWeek","The Hacker News"],"coverage":4,"cve_ids":[],"summary":"A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP\u2026","source":"The Hacker News","date_rel":"19h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKBZR5elkBVKRcFO6lyde7XYDVO73IBxDvnx9-UkLst3GhVFuK8Yz3QBVIIEJABDjZuJMn8tyf7RLLPIRV8J8qe-OUULjnQRaQNyWricSsOjlKJoyYu8WOvs5PxBWQpzuiq8hlDlOY7zY-qIYDgQ6NFuifS5GbHbnLBET0OTfmsMC8797Mo5un9_ECyg8/s1600/sap-hacker.jpg","description":"A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,","related":[{"title":"SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities","link":"https://www.securityweek.com/sap-patches-critical-netweaver-s-4hana-vulnerabilities/","source":"SecurityWeek","date_rel":"6h ago"},{"title":"SAP warns of maximum severity OAuth2 SSRF security flaw","link":"https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/","source":"Bleeping Computer","date_rel":"23h ago"},{"title":"SAP security advisory \u2013 October 2026 monthly rollup (AV26-1030)","link":"https://cyber.gc.ca/en/alerts-advisories/sap-security-advisory-october-2026-monthly-rollup-av26-1030","source":"CCCS Alerts & Advisories","date_rel":"23h ago"}]},{"title":"How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team","link":"https://thehackernews.com/2026/10/how-to-run-deepfake-readiness-drill.html","reason":"Teams","category":"News","sources":["Infosecurity Magazine","The Hacker News","Wiz Research"],"coverage":3,"cve_ids":[],"summary":"Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The\u2026","source":"The Hacker News","date_rel":"1h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEYzcrs6sSW45od6MYo5jFl29yPGuwipgy7nfS3STYqknrD9b5OcU00_c0sqjG8Arvqq36ojwHSZMbjboA3bUQ1-ZcLRRjmuEQpzTDYYXnyvySzynW0UOvHOVmYNNzp_n-J5xXmwByMCofw5kxslXe4dqAVYqrWa-1LivXxPNa_ZGOQgIBxhyhvtiLxDs/s1600/icon.jpg","description":"Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It's the CFO, or it sounds exactly like her, asking the controller to push a supplier payment out before the weekend because a deal closes","related":[{"title":"Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov","link":"https://www.wiz.io/blog/wiz-for-gov-agents-fedramp","source":"Wiz Research","date_rel":"1h ago"},{"title":"Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool","link":"https://www.infosecurity-magazine.com/news/defenders-skeptical-agentic-ai/","source":"Infosecurity Magazine","date_rel":"23h ago"}]},{"title":"Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days","link":"https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html","reason":"Chrome","category":"News","sources":["Cyber Security News","SecurityWeek","The Hacker News"],"coverage":3,"cve_ids":[],"summary":"A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the\u2026","source":"The Hacker News","date_rel":"1h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLXn6RSZOSq2StbSf2fHVaHwVEetIYN0wGfuaIcyaEnwSnXLaY1FBfSKPFzzQuKvtpRygCR7AvNixA-SCkIA98QjnT7gE2UWYtoiZLs5VxQC8KTSJwwlcP0helOb3F4hbSo4uqITjJYPiZHSSuKkm1O_BXFYeyEU7koe_77QSmKbU33o5hteBC5-0dxrs/s1600/chrome-exploit.jpg","description":"A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $","related":[{"title":"Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6","link":"https://cybersecuritynews.com/google-chrome-exploit-gpt-5-6/","source":"Cyber Security News","date_rel":"3h ago"},{"title":"Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks","link":"https://cybersecuritynews.com/multiple-google-chrome-vulnerabilities/","source":"Cyber Security News","date_rel":"4h ago"},{"title":"Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise","link":"https://www.securityweek.com/chrome-firefox-updates-patch-114-flaws-as-mozilla-unveils-firefox-enterprise/","source":"SecurityWeek","date_rel":"5h ago"},{"title":"Google Partially Reverses Chrome Bug Bounty Cuts","link":"https://www.securityweek.com/google-partially-reverses-chrome-bug-bounty-cuts/","source":"SecurityWeek","date_rel":"19h ago"}]},{"title":"Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)","link":"https://www.rapid7.com/blog/post/etr-ivanti-connect-secure-zero-day-exploited-in-the-wild-cve-2026-104935","reason":"CVE-2026-104935","category":"Research","sources":["CISA Alerts & Advisories","Rapid7 Blog","SecurityWeek"],"coverage":3,"cve_ids":["CVE-2026-104935","CVE-2026-96951"],"summary":"Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a\u2026","source":"Rapid7 Blog","date_rel":"19h ago","thumbnail":"https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp","description":"Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-day vulnerability. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirms\u2026","related":[{"title":"Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN","link":"https://www.securityweek.com/ivanti-zero-day-chain-gave-attackers-root-access-to-fully-patched-vpn/","source":"SecurityWeek","date_rel":"18h ago"},{"title":"CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure","link":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure","source":"CISA Alerts & Advisories","date_rel":"13 Oct"},{"title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"13 Oct"}]},{"title":"CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab","link":"https://www.rapid7.com/blog/post/etr-cve-2026-97229-critical-unauthenticated-remote-code-execution-in-gitlab","reason":"Gitlab","category":"Research","sources":["CCCS Alerts & Advisories","Rapid7 Blog","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-97229"],"summary":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE)\u2026","source":"Rapid7 Blog","date_rel":"13 Oct","thumbnail":"https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp","description":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0 . Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in\u2026","related":[{"title":"GitLab security advisory (AV26-1028)","link":"https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-1028","source":"CCCS Alerts & Advisories","date_rel":"23h ago"},{"title":"GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code","link":"https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html","source":"The Hacker News","date_rel":"13 Oct"}]},{"title":"Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products","link":"https://www.securityweek.com/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products/","reason":"Citrix","category":"News","sources":["CCCS Alerts & Advisories","SecurityWeek"],"coverage":2,"cve_ids":[],"summary":"Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.","source":"SecurityWeek","date_rel":"5h ago","thumbnail":"","description":"","related":[{"title":"Citrix security advisory (AV26-1034)","link":"https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1034","source":"CCCS Alerts & Advisories","date_rel":"17h ago"}]}],"worth_reading":[{"title":"Microsoft\u2019s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)","link":"https://www.tenable.com/blog/microsofts-october-2026-patch-tuesday-addresses-1407-cves-cve-2026-96951","reason":"CVE-2026-96951","category":"Research","sources":["SecurityWeek","Tenable Blog"],"coverage":2,"cve_ids":["CVE-2026-96951"],"summary":"69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month\u2019s\u2026","source":"Tenable Blog","date_rel":"15h ago","thumbnail":"","description":"69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month\u2019s updates include patches for two zero days, including one that was exploited in the wild. Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low. This month\u2019s update includes patches for 301 products and components. The following table lists the products with the most CVEs patched this month. A\u2026","related":[{"title":"Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day","link":"https://www.securityweek.com/microsoft-patches-record-1413-vulnerabilities-including-exploited-windows-zero-day/","source":"SecurityWeek","date_rel":"5h ago"}]}],"kev_watch":[],"vuln_watch":[{"id":"CVE-2026-109109","vendor":"Wavlink","product":"WL-WN530BE1-A","severity":"CRITICAL","score":10.0,"description":"A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COO\u2026","cwe":"CWE-119","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0058,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://gist.github.com/Rauzk/9ef4fe7574e5689386cc43139f4cf9e1","https://vuldb.com/cve/CVE-2026-109109","https://vuldb.com/submit/909191"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-109109"},{"id":"CVE-2026-109110","vendor":"Wavlink","product":"WL-WN592AX6","severity":"CRITICAL","score":10.0,"description":"A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit \u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0203,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link","https://vuldb.com/cve/CVE-2026-109110","https://vuldb.com/submit/913573"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-109110"},{"id":"CVE-2026-65162","vendor":"NVIDIA","product":"AIStore framework","severity":"CRITICAL","score":10.0,"description":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code ex\u2026","cwe":"CWE-250","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/NVIDIA/product-security/tree/main/2026/5889","https://nvd.nist.gov/vuln/detail/CVE-2026-65162","https://www.cve.org/CVERecord?id=CVE-2026-65162"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-65162"},{"id":"CVE-2024-34323","vendor":"Unknown","product":"","severity":"CRITICAL","score":10.0,"description":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.","cwe":"CWE-639","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","fix":false,"fix_url":"","refs":["https://prophoenix.com/law-rms/","https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details"],"url":"https://cve.blackmesa.ca/?q=CVE-2024-34323"},{"id":"CVE-2026-55675","vendor":"saltyorg","product":"docs","severity":"CRITICAL","score":10.0,"description":"The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, a\u2026","cwe":"CWE-94","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/saltyorg/docs/commit/649c9aea2daef1168eeb0415b44e65dbbde9f220","https://github.com/saltyorg/docs/security/advisories/GHSA-wr2h-fpxm-ff4x","https://github.com/saltyorg/docs/security/advisories/GHSA-wr2h-fpxm-ff4x"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-55675"},{"id":"CVE-2026-94603","vendor":"Check Point","product":"podman","severity":"CRITICAL","score":10.0,"description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con\u2026","cwe":"CWE-693","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-94603"},{"id":"CVE-2026-103849","vendor":"Adobe","product":"Adobe Commerce","severity":"CRITICAL","score":10.0,"description":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or co\u2026","cwe":"CWE-1336","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/commerce/apsb26-153.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-103849"},{"id":"CVE-2026-110130","vendor":"Finsys","product":"dockhand","severity":"CRITICAL","score":10.0,"description":"Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for u\u2026","cwe":"CWE-288","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/Finsys/dockhand/security/advisories/GHSA-r3mg-r5vm-3v6w","https://www.vulncheck.com/advisories/dockhand-before-1.0.45-authentication-bypass-via-static-asset-check"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-110130"},{"id":"CVE-2026-48382","vendor":"Adobe","product":"Adobe Experience Manager as a Cloud Service","severity":"CRITICAL","score":10.0,"description":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or s\u2026","cwe":"CWE-863","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-48382"},{"id":"CVE-2026-48383","vendor":"Adobe","product":"Adobe Experience Manager as a Cloud Service","severity":"CRITICAL","score":10.0,"description":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or s\u2026","cwe":"CWE-863","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-48383"}],"vendor_spikes":[{"vendor":"Microsoft","count":1438,"critical_count":63},{"vendor":"Adobe","count":177,"critical_count":26},{"vendor":"Mozilla","count":83,"critical_count":2},{"vendor":"WordPress","count":43,"critical_count":7},{"vendor":"Google","count":38,"critical_count":0},{"vendor":"Siemens","count":32,"critical_count":4},{"vendor":"Unknown","count":28,"critical_count":2},{"vendor":"FreeRDP","count":21,"critical_count":0},{"vendor":"Omnispace","count":21,"critical_count":1},{"vendor":"NVIDIA","count":18,"critical_count":2}],"epss_risers":[],"developing_map":{},"trending_count":13,"new_cve_count":2284,"has_news_data":true,"has_cve_data":true,"news_for_cve":{"CVE-2026-83500":{"anchor":"#dev-1","rank":1,"coverage":11},"CVE-2026-85851":{"anchor":"#dev-1","rank":1,"coverage":11},"CVE-2026-85920":{"anchor":"#dev-1","rank":1,"coverage":11},"CVE-2026-88070":{"anchor":"#dev-1","rank":1,"coverage":11},"CVE-2026-105725":{"anchor":"#dev-4","rank":4,"coverage":4},"CVE-2026-108457":{"anchor":"#dev-4","rank":4,"coverage":4},"CVE-2026-108468":{"anchor":"#dev-4","rank":4,"coverage":4},"CVE-2026-104935":{"anchor":"#dev-8","rank":8,"coverage":3},"CVE-2026-96951":{"anchor":"#dev-8","rank":8,"coverage":3},"CVE-2026-97229":{"anchor":"#dev-9","rank":9,"coverage":3}}}