Monday, October 19, 2026 · generated · about 4 min read
Morning Brief
Patch today vendors with the most new CVEs today
- Linux 399
- WordPress 21
- Apple 16
- Gitea 12
- Microsoft 11
- HashiCorp 8
- diem-project 8
- AUTOMATIC1111 4
- Unknown 4
- Canonical 4
Ranked by CVE count. Each vendor opens the CVE Feed filtered to that vendor and these dates.
Top developments ranked by cross-source trending
-
Image: The Hacker News ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise
Also in Bleeping Computer Infosecurity Magazine Bleeping Computer +3
-
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic
Also in The Hacker News The Hacker News The Register Security +1
-
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key there, and Console uses that key to call the provider so team members can use the models without
Also in Cyber Security News CCCS Alerts & Advisories The Hacker News
-
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
CyberSN observed a particularly big dip in cybersecurity leadership positions such as CISO and Cybersecurity Director in 2026 compared to 2025
Also in SecurityWeek
-
Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services
Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt Exchange Server email services, blocking webmail access and leaving messages undelivered. The issue affects some on-premises systems running Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition. Microsoft has published a workaround and advises administrators not to uninstall the Windows updates. The failures stem from changes in Windows Server, not the separate October Exchange Server security updates. Servers can experience problems even without installing…
Also in Bleeping Computer
-
Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI
Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang Ge of Anthropic with Claude AI. The update also addresses one critical, six high-severity, and three medium-severity vulnerabilities. Google announced the update on October 15, 2026. Google is rolling out Chrome versions 155.0.8059.84/.85 for Windows and Mac, and version 155.0.8059.84 for Linux over the coming days and weeks. Users should install the update when it becomes available and check Chrome’s About page to…
Also in Volexity SecurityWeek
-
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Also in CCCS Alerts & Advisories
Vulnerability watch what to look at, most urgent first
| Details | CVE | Product | Severity | CVSS | EPSS | KEV | Fix | In the news | |
|---|---|---|---|---|---|---|---|---|---|
| Highest scoring today 10new CVEs, highest CVSS first | |||||||||
| CVE-2026-110372 | OttoKitBrainstorm Force | Critical | 9.8 | — | — | None linked | — | CVSS 9.8No fix linked | |
What it isIncorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40. Attack
Exploitation
|
|||||||||
| CVE-2026-110886 | Conversational Forms for ChatBotQuantumCloud | Critical | 9.8 | — | — | None linked | — | CVSS 9.8No fix linked | |
What it isDeserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1. Attack
Exploitation
|
|||||||||
| CVE-2026-111998 | vanusvanus-labs | Critical | 9.8 | — | — | None linked | — | CVSS 9.8No fix linked | |
What it isVanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gR… Attack
Exploitation
|
|||||||||
| CVE-2026-108983 | GV-ASManagerGeoVision Inc. | Critical | 9.8 | — | — | None linked | — | CVSS 9.8No fix linked | |
What it isA vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . Attack
Exploitation
|
|||||||||
| CVE-2026-109894 | BookticsArraytics | Critical | 9.3 | — | — | None linked | — | CVSS 9.3No fix linked | |
What it isImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29. Attack
Exploitation
|
|||||||||
| CVE-2026-107436 | Strong TestimonialsWP Chill | High | 8.8 | — | — | None linked | — | CVSS 8.8No fix linked | |
What it isDeserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12. Attack
Exploitation
|
|||||||||
| CVE-2026-110895 | Support GenixDevItems | High | 8.5 | — | — | None linked | — | CVSS 8.5No fix linked | |
What it isImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54. Attack
Exploitation
|
|||||||||
| CVE-2026-110373 | Login with phone numberHamid Alinia | High | 8.1 | — | — | None linked | — | CVSS 8.1No fix linked | |
What it isIncorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77. Attack
Exploitation
|
|||||||||
| CVE-2026-111441 | openGauss-serveropenGauss-server | High | 8.1 | — | — | None linked | — | CVSS 8.1No fix linked | |
What it is在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >= l… Attack
Exploitation
|
|||||||||
| CVE-2026-16487 | Red Hat Enterprise Linux 10Red Hat | High | 8.1 | — | — | None linked | — | CVSS 8.1No fix linked | |
What it isA flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an at… Attack
Exploitation
|
|||||||||
Click a row, or press +, to expand it.EPSS is FIRST's estimated chance of exploitation in the next 30 days.Full CVE Feed
Assembled automatically, once a day, from data the Security Feed and CVE Feed already collect and score. No AI writes any of this, and every number traces back to something already published on those two tools.
Top developments come from the Security Feed's cross-source trending detection. Vulnerability watch comes from the CVE Feed's daily NVD and CISA KEV sync.