{"date_iso":"2026-10-15","date_human":"Thursday, October 15, 2026","generated_utc":"2026-10-15 12:57 UTC","read_minutes":5,"patch_tuesday":false,"top_stories":[{"title":"Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely","link":"https://cybersecuritynews.com/multiple-active-directory-vulnerabilities/","reason":"Microsoft","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","Cisco Talos","Cyber Security News","CyberScoop","Dark Reading","Huntress","Infosecurity Magazine","Krebs On Security","Malwarebytes Labs","Rapid7 Blog","SANS Internet Storm Center","Tenable Blog","The Hacker News","The Record"],"coverage":15,"cve_ids":["CVE-2026-69982","CVE-2026-96252","CVE-2026-96951"],"summary":"Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows domain environments. The issues are tracked as CVE-2026-69982, CVE-2026-96252, and\u2026","source":"Cyber Security News","date_rel":"9h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Multiple-Active-Directory-Vulnerabilities-Let-Attackers-Bypass-Security-Feature-remotely-1.webp","description":"Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows domain environments. The issues are tracked as CVE-2026-69982, CVE-2026-96252, and CVE-2026-108131, and administrators should review Microsoft\u2019s Security Update Guide entries and deploy the available fixes as soon as possible. Active Directory is the central identity service many organizations use to manage users, computers, permissions, and access to business systems. A weakness that bypasses a security control in this environment can be serious because\u2026","related":[{"title":"Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages","link":"https://www.infosecurity-magazine.com/news/microsoft-yam-store-one-billion/","source":"Infosecurity Magazine","date_rel":"2h ago"},{"title":"Microsoft fixes bug causing Windows black screens, Explorer crashes","link":"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-bug-causing-windows-black-screens-explorer-crashes/","source":"Bleeping Computer","date_rel":"3h ago"},{"title":"Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities","link":"https://cyberscoop.com/microsoft-patch-tuesday-october-2026/","source":"CyberScoop","date_rel":"19h ago"},{"title":"Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages","link":"https://thehackernews.com/2026/10/microsoft-disrupts-3-phishing-kits.html","source":"The Hacker News","date_rel":"19h ago"},{"title":"Microsoft VSS: Still Essential, But Not the Whole Story","link":"https://www.huntress.com/blog/microsoft-vss-limits-and-best-practices","source":"Huntress","date_rel":"20h ago"},{"title":"Microsoft security advisory \u2013 October 2026 monthly rollup (AV26-1038)","link":"https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2026-monthly-rollup-av26-1038","source":"CCCS Alerts & Advisories","date_rel":"21h ago"}]},{"title":"Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks","link":"https://cybersecuritynews.com/cisco-secure-email-gateway-0-day-vulnerability/","reason":"Cisco","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","Cyber Security News","Recorded Future Intelligence","SecurityWeek","The Hacker News","The Register Security"],"coverage":7,"cve_ids":["CVE-2026-76519"],"summary":"Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries\u2026","source":"Cyber Security News","date_rel":"9h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Cisco-Secure-Email-Gateway-0-Day-Vulnerability.webp","description":"Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries a CVSS score of 9.8 and allows attacks through specially crafted email attachments without requiring a login. Cisco published its advisory on October 14, 2026. The company said its security response team became aware of active exploitation in October. Public reporting has not identified the attackers or established how many devices have been compromised, leaving the scale of\u2026","related":[{"title":"Cisco Warns of Exploited Secure Email Gateway Vulnerability","link":"https://www.securityweek.com/cisco-warns-of-exploited-secure-email-gateway-vulnerability/","source":"SecurityWeek","date_rel":"6h ago"},{"title":"Cisco make-me-root email bug exploited as a 0-day by unknown crims","link":"https://www.theregister.com/security/2026/10/14/cisco-make-me-root-email-bug-exploited-as-a-0-day-by-unknown-crims/5303168","source":"The Register Security","date_rel":"15h ago"},{"title":"Cisco security advisory (AV26-1042) \u2013 Update 1","link":"https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1042","source":"CCCS Alerts & Advisories","date_rel":"16h ago"},{"title":"Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability","link":"https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html","source":"The Hacker News","date_rel":"18h ago"},{"title":"Cisco patches new Secure Email Gateway zero-day exploited in attacks","link":"https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/","source":"Bleeping Computer","date_rel":"19h ago"},{"title":"TAG-193\u2019s Regional Espionage Operations","link":"https://www.recordedfuture.com/blog/tag193-regional-espionage-operations","source":"Recorded Future Intelligence","date_rel":"14 Oct"}]},{"title":"Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]","link":"https://cybersecuritynews.com/best-devsecops-platforms/","reason":"Teams","category":"News","sources":["Cyber Security News","Huntress","Infosecurity Magazine","SecurityWeek","The Hacker News","Wiz Research"],"coverage":6,"cve_ids":[],"summary":"DevSecOps succeeds when security rides the pipeline instead of blocking it and fails when ten scanners produce ten backlogs nobody owns. Modern engineering teams aligning with enterprise DevSecOps playbooks recognize\u2026","source":"Cyber Security News","date_rel":"5h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Best-DevSecOps-Platforms.webp","description":"DevSecOps succeeds when security rides the pipeline instead of blocking it and fails when ten scanners produce ten backlogs nobody owns. Modern engineering teams aligning with enterprise DevSecOps playbooks recognize that vulnerability volume is a vanity metric; the true measure of a program is whether developers actually remediate what their tooling flags. We scored ten platforms on the metric that matters: whether developers actually fix what the tools find. GitLab takes 1 for making the whole discipline one product decision; GitHub Advanced Security and Snyk complete the podium. Key\u2026","related":[{"title":"10 Endpoint Security Trends and Tips for 2027 | Huntress","link":"https://www.huntress.com/blog/endpoint-security-trends","source":"Huntress","date_rel":"20h ago"},{"title":"Harmonic Security Raises $50 Million for Workforce AI Protection","link":"https://www.securityweek.com/harmonic-security-raises-50-million-for-workforce-ai-protection/","source":"SecurityWeek","date_rel":"22h ago"},{"title":"How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team","link":"https://thehackernews.com/2026/10/how-to-run-deepfake-readiness-drill.html","source":"The Hacker News","date_rel":"14 Oct"},{"title":"Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov","link":"https://www.wiz.io/blog/wiz-for-gov-agents-fedramp","source":"Wiz Research","date_rel":"14 Oct"},{"title":"Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool","link":"https://www.infosecurity-magazine.com/news/defenders-skeptical-agentic-ai/","source":"Infosecurity Magazine","date_rel":"13 Oct"}]},{"title":"Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks","link":"https://www.theregister.com/security/2026/10/14/ivanti-patches-connect-secure-zero-day-after-researchers-confirm-in-the-wild-attacks/5303095","reason":"Ivanti","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","CyberScoop","The Hacker News","The Register Security","Volexity"],"coverage":6,"cve_ids":[],"summary":"Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix\u2026","source":"The Register Security","date_rel":"19h ago","thumbnail":"https://image.theregister.com/?imageId=232983&width=800","description":"Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix CVE-2026-104935, an authentication bypass flaw discovered by Volexity. Rated 8.6 on the CVSS scale, it allows remote, unauthenticated attackers to execute arbitrary commands. \"We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure,\" the vendor said in its advisory. There are limited indicators of compromise available at\u2026","related":[{"title":"CISA warns admins to immediately fix Ivanti flaw exploited as zero-day","link":"https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/","source":"Bleeping Computer","date_rel":"23h ago"},{"title":"CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts","link":"https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.html","source":"The Hacker News","date_rel":"14 Oct"},{"title":"Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day","link":"https://cyberscoop.com/ivanti-connect-secure-zero-day-actively-exploited/","source":"CyberScoop","date_rel":"13 Oct"},{"title":"Ivanti security advisory (AV26-1035)","link":"https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035","source":"CCCS Alerts & Advisories","date_rel":"13 Oct"},{"title":"Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far","link":"https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html","source":"The Hacker News","date_rel":"13 Oct"},{"title":"A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days","link":"https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/","source":"Volexity","date_rel":"13 Oct"}]},{"title":"Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation","link":"https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html","reason":"CVE-2026-0322","category":"News","sources":["Bleeping Computer","CISA Alerts & Advisories","Cyber Security News","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-0322"],"summary":"Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of\u2026","source":"The Hacker News","date_rel":"1h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4G5JAIF-hCnKf9QyWLzWIWxTrUIjqshujDHf0-_9m84O9f4S0Z-IQ4Jg-T11Ph_rwZvzsFU8Z-pI3uRsnvPSE-FK_VtrUx0pNZgHKf3PuMJCQmwopiE5hyMRSObeV7_VSrF7WC_iiG9T8wMNivOOBC12F7bLK8WI-MNjCffolAJnnhk-X-v1ecxwYtrQz/s1600/palo.jpg","description":"Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. \"A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an","related":[{"title":"Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls","link":"https://cybersecuritynews.com/pan-os-0-day-vulnerability/","source":"Cyber Security News","date_rel":"9h ago"},{"title":"Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks","link":"https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/","source":"Bleeping Computer","date_rel":"14h ago"},{"title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"14 Oct"}]},{"title":"UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations","link":"https://cybersecuritynews.com/uat-6275-hackers/","reason":"Windows","category":"News","sources":["Cyber Security News","Microsoft Security","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-69366","CVE-2026-69676","CVE-2026-70584"],"summary":"UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched\u2026","source":"Cyber Security News","date_rel":"3h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/UAT-6275-Hackers-Exploit-WinRAR-Flaw-to-Target-CIS-Government-Organizations.webp","description":"UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched archive tool can turn a routine attachment into lasting remote access, with the malicious program starting when the victim next signs in. The campaign involves CVE-2025-8088, a path traversal flaw that lets crafted archives write files outside the folder chosen for extraction. Researchers observed the group adding this method in April 2026, alongside older attacks using Word macros\u2026","related":[{"title":"CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69366","source":"Microsoft Security","date_rel":"22h ago"},{"title":"CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69676","source":"Microsoft Security","date_rel":"22h ago"},{"title":"CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584","source":"Microsoft Security","date_rel":"22h ago"},{"title":"Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave","link":"https://thehackernews.com/2026/10/four-byte-write-and-timing-bug-let.html","source":"The Hacker News","date_rel":"14 Oct"}]},{"title":"Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks","link":"https://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.html","reason":"Android","category":"News","sources":["Bleeping Computer","SecurityWeek","The Hacker News"],"coverage":3,"cve_ids":[],"summary":"Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from\u2026","source":"The Hacker News","date_rel":"14 Oct","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj010OXrg2ZBrxwqSnpzd8SrIDY_dYOMtdnzIpG7YnCjv1QB58_HylDTkfFmXtZYci90doRcSrPdFfYLowM_S5t2RpD6UkCoWveJrKajQS-7d3sDtyI22FYN0TKy-pQpzWScUB_ROhXRNzZi9dzhgg02kH3WVtdGPNWYBLKv8qZgsa9kREW1SvZ2LTF2AWV/s1600/android-banking.jpg","description":"Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking","related":[{"title":"Novel Android RAT \u2018Hirudo\u2019 Replaces Banking Apps With Trojanized Copies","link":"https://www.securityweek.com/novel-android-banking-rat-hirudo-replaces-banking-apps-with-trojanized-copies/","source":"SecurityWeek","date_rel":"2h ago"},{"title":"Hirudo Android malware replaces banking apps to evade security checks","link":"https://www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/","source":"Bleeping Computer","date_rel":"14 Oct"},{"title":"Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets","link":"https://thehackernews.com/2026/10/anthropic-warns-small-ai-models-could.html","source":"The Hacker News","date_rel":"13 Oct"},{"title":"Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies","link":"https://thehackernews.com/2026/10/low-cost-android-phones-ship-with.html","source":"The Hacker News","date_rel":"13 Oct"}]},{"title":"Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles","link":"https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching","reason":"CVE-2026-104935","category":"News","sources":["CISA Alerts & Advisories","Dark Reading","Rapid7 Blog"],"coverage":3,"cve_ids":["CVE-2026-104935","CVE-2026-96951"],"summary":"CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.","source":"Dark Reading","date_rel":"15h ago","thumbnail":"https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt5c7ce56f98018528/6acfd608b8750c62d9a7bd46/patching-Florencio_Horcajo_Alvarez-Getty-2270656800.jpg?width=720&quality=80&disable=upscale","description":"","related":[{"title":"Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)","link":"https://www.rapid7.com/blog/post/etr-ivanti-connect-secure-zero-day-exploited-in-the-wild-cve-2026-104935","source":"Rapid7 Blog","date_rel":"13 Oct"},{"title":"CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure","link":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure","source":"CISA Alerts & Advisories","date_rel":"13 Oct"},{"title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"13 Oct"}]},{"title":"Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads","link":"https://cybersecuritynews.com/fake-chrome-app/","reason":"Chrome","category":"News","sources":["Cyber Security News","The Hacker News","The Register Security"],"coverage":3,"cve_ids":[],"summary":"A fake Google Chrome app appeared on Google Play with a screenshot showing more than 100,000 downloads, raising fresh concerns about app checks and paid search results. The listing copied Chrome\u2019s name, icon, and\u2026","source":"Cyber Security News","date_rel":"6h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Fake-Chrome-App-on-Google-Play-Evades-Detection-and-Reaches-100000-Downloads.webp","description":"A fake Google Chrome app appeared on Google Play with a screenshot showing more than 100,000 downloads, raising fresh concerns about app checks and paid search results. The listing copied Chrome\u2019s name, icon, and description, but its developer was Hizbartech rather than Google LLC. The app reportedly appeared above the real browser as a sponsored result. However, the download badge does not prove that 100,000 people installed it while it carried Chrome\u2019s branding. Available reports also do not establish password theft, a banking Trojan, or a confirmed malware payload. Researchers at\u2026","related":[{"title":"Security researchers spent 6 days doing their Chromework, built 1B user exploit","link":"https://www.theregister.com/security/2026/10/14/security-researchers-spent-6-days-doing-their-chromework-built-1b-user-exploit/5303134","source":"The Register Security","date_rel":"17h ago"},{"title":"Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days","link":"https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html","source":"The Hacker News","date_rel":"14 Oct"}]},{"title":"Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool","link":"https://www.infosecurity-magazine.com/news/high-risk-vulnerabilities-llm-tool/","reason":"CVE-2026-35029","category":"News","sources":["Check Point Research","Infosecurity Magazine"],"coverage":2,"cve_ids":["CVE-2026-35029","CVE-2026-59823"],"summary":"CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic","source":"Infosecurity Magazine","date_rel":"1h ago","thumbnail":"","description":"","related":[{"title":"When LLM Gateways Go Wrong: Findings from LiteLLM","link":"https://research.checkpoint.com/2026/when-llm-gateways-go-wrong-findings-from-litellm/","source":"Check Point Research","date_rel":"13 Oct"}]}],"worth_reading":[{"title":"CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab","link":"https://www.rapid7.com/blog/post/etr-cve-2026-97229-critical-unauthenticated-remote-code-execution-in-gitlab","reason":"Gitlab","category":"Research","sources":["CCCS Alerts & Advisories","Rapid7 Blog","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-97229"],"summary":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE)\u2026","source":"Rapid7 Blog","date_rel":"13 Oct","thumbnail":"https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp","description":"Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0 . Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in\u2026","related":[{"title":"GitLab security advisory (AV26-1028)","link":"https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-1028","source":"CCCS Alerts & Advisories","date_rel":"13 Oct"},{"title":"GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code","link":"https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html","source":"The Hacker News","date_rel":"13 Oct"}]}],"kev_watch":[],"vuln_watch":[{"id":"CVE-2026-107594","vendor":"WordPress","product":"File Upload to Order","severity":"CRITICAL","score":10.0,"description":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated \u2026","cwe":"CWE-73","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0019,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","fix":false,"fix_url":"","refs":["https://wpscan.com/vulnerability/bcd5538b-0ad4-4311-b3b6-3fb89d4caa76/"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-107594"},{"id":"CVE-2026-55572","vendor":"e107inc","product":"e107","severity":"CRITICAL","score":10.0,"description":"e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107_plugins/alt_auth/otherdb_auth.php and e10\u2026","cwe":"CWE-89","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/e107inc/e107/commit/120bd4bdbe18c8690c60a007ad6716e52e6ee965","https://github.com/e107inc/e107/releases/tag/v2.3.7","https://github.com/e107inc/e107/security/advisories/GHSA-5f75-c25x-59wx"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-55572"},{"id":"CVE-2026-110536","vendor":"D-Link","product":"DIR-868L","severity":"CRITICAL","score":10.0,"description":"A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. \u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md","https://github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc","https://vuldb.com/cve/CVE-2026-110536"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-110536"},{"id":"CVE-2026-89310","vendor":"JTL SW GmbH","product":"JTL-WMS","severity":"CRITICAL","score":9.9,"description":"A parameter taken from the request body is inserted into\na T-SQL statement without parameterization or escaping, allowing\na remote attacker to execute arbitrary SQL statements in the context of the\napplication's database account.","cwe":"CWE-89","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0047,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.jtl-software.com/de/cve-2026-89309-cve-2026-89310"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-89310"},{"id":"CVE-2026-77524","vendor":"Kubernetes","product":"keda","severity":"CRITICAL","score":9.9,"description":"KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled en\u2026","cwe":"CWE-269","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d","https://github.com/kedacore/keda/releases/tag/v2.21.0","https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-77524"},{"id":"CVE-2026-108390","vendor":"hestiacp","product":"hestiacp","severity":"CRITICAL","score":9.9,"description":"Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in func/main.sh does not escape single quotes when writing a custom document-root value to a user'\u2026","cwe":"CWE-88","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/hestiacp/hestiacp/commit/4d86018660f35a1d64a0ae819bc5ee700949a287","https://github.com/hestiacp/hestiacp/security/advisories/GHSA-r9q4-pmcm-5qqf","https://ravindulakmina.pages.dev/advisories/cve-2026-108390-hestiacp-apostrophe-to-root"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108390"},{"id":"CVE-2026-104748","vendor":"WordPress","product":"SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications","severity":"CRITICAL","score":9.8,"description":"The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_r\u2026","cwe":"CWE-269","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0065,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://plugins.svn.wordpress.org/simple-form/trunk/","https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Assets.php#L265","https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L184"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-104748"},{"id":"CVE-2026-107424","vendor":"M A Vinoth Kumar","product":"Frontend Dashboard","severity":"CRITICAL","score":9.8,"description":"Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.","cwe":"CWE-266","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://patchstack.com/database/wordpress/plugin/frontend-dashboard/vulnerability/wordpress-frontend-dashboard-plugin-3-0-7-privilege-escalation-vulnerability?_s_id=cve"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-107424"},{"id":"CVE-2026-108291","vendor":"itthinx","product":"Affiliates","severity":"CRITICAL","score":9.8,"description":"Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.","cwe":"CWE-502","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://patchstack.com/database/wordpress/plugin/affiliates/vulnerability/wordpress-affiliates-plugin-7-0-1-php-object-injection-vulnerability?_s_id=cve"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-108291"},{"id":"CVE-2026-16740","vendor":"TR7 Cyber \u200b\u200bDefense Inc.","product":"TR7 ASP","severity":"CRITICAL","score":9.8,"description":"Missing authentication for critical function vulnerability in TR7 Cyber \u200b\u200bDefense Inc. TR7 ASP on virtual appliance and TR7 Cyber \u200b\u200bDefense Inc. TR7 ASP on physical appliance allows OS Command Injection.\n\nThis issue affects TR7 ASP: from 1.\u2026","cwe":"CWE-306","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-16740"}],"vendor_spikes":[{"vendor":"Juniper","count":153,"critical_count":15},{"vendor":"WordPress","count":78,"critical_count":3},{"vendor":"Linux","count":42,"critical_count":0},{"vendor":"Red Hat","count":30,"critical_count":0},{"vendor":"Gitea","count":29,"critical_count":1},{"vendor":"Microsoft","count":21,"critical_count":2},{"vendor":"HP","count":21,"critical_count":0},{"vendor":"error311","count":20,"critical_count":0},{"vendor":"HashiCorp","count":13,"critical_count":0},{"vendor":"Progress","count":12,"critical_count":0}],"epss_risers":[],"developing_map":{},"trending_count":16,"new_cve_count":804,"has_news_data":true,"has_cve_data":true,"news_for_cve":{"CVE-2026-69982":{"anchor":"#dev-1","rank":1,"coverage":15},"CVE-2026-96252":{"anchor":"#dev-1","rank":1,"coverage":15},"CVE-2026-96951":{"anchor":"#dev-1","rank":1,"coverage":15},"CVE-2026-76519":{"anchor":"#dev-2","rank":2,"coverage":7},"CVE-2026-0322":{"anchor":"#dev-5","rank":5,"coverage":4},"CVE-2026-69366":{"anchor":"#dev-6","rank":6,"coverage":3},"CVE-2026-69676":{"anchor":"#dev-6","rank":6,"coverage":3},"CVE-2026-70584":{"anchor":"#dev-6","rank":6,"coverage":3},"CVE-2026-104935":{"anchor":"#dev-8","rank":8,"coverage":3},"CVE-2026-35029":{"anchor":"#dev-10","rank":10,"coverage":2},"CVE-2026-59823":{"anchor":"#dev-10","rank":10,"coverage":2}}}