{"date_iso":"2026-10-28","date_human":"Wednesday, October 28, 2026","generated_utc":"2026-10-28 12:57 UTC","read_minutes":5,"patch_tuesday":false,"top_stories":[{"title":"Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers","link":"https://cybersecuritynews.com/camera-management-software/","reason":"Microsoft","category":"News","sources":["Bleeping Computer","Cyber Security News","CyberScoop","Elastic Security Labs","Huntress","Proofpoint Threat Insight","The Hacker News","The Register Security"],"coverage":8,"cve_ids":[],"summary":"Hackers have compromised camera management software to deploy malware on Windows computers, using a legitimate Microsoft program to run malicious code and maintain access. The activity shows how software used to manage\u2026","source":"Cyber Security News","date_rel":"1h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Hackers-Compromise-Camera-Management-Software-to-Deploy-Malware-on-Windows-Computers.webp","description":"Hackers have compromised camera management software to deploy malware on Windows computers, using a legitimate Microsoft program to run malicious code and maintain access. The activity shows how software used to manage surveillance systems can become an entry point into business networks. The incidents followed a similar pattern: attackers gained access through the camera application, deployed a suspected reverse shell, and used DLL sideloading to contact an outside server. Like earlier cases involving abuse of monitoring tools , the activity highlights risks surrounding software trusted for\u2026","related":[{"title":"Microsoft Releases Emergency Windows Updates to Block Compromised eMudhra Certificates","link":"https://cybersecuritynews.com/microsoft-to-block-emudhra-certificates/","source":"Cyber Security News","date_rel":"3h ago"},{"title":"Microsoft releases Windows OOB updates to distrust eMudhra certificates","link":"https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-oob-updates-to-distrust-emudhra-certificates/","source":"Bleeping Computer","date_rel":"18h ago"},{"title":"The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest","link":"https://www.bleepingcomputer.com/news/security/the-huntress-tragic-quadrant-ranking-threats-hitting-businesses-hardest/","source":"Bleeping Computer","date_rel":"22h ago"},{"title":"Microsoft releases out-of-band Windows fixes with certificate updates","link":"https://www.theregister.com/security/2026/10/27/microsoft-releases-out-of-band-windows-fixes-with-certificate-updates/5305637","source":"The Register Security","date_rel":"27 Oct"},{"title":"Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens","link":"https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html","source":"The Hacker News","date_rel":"27 Oct"},{"title":"What happens when security tools go dark before the ransomware","link":"https://cyberscoop.com/warlock-ransomware-storm-2603-sharepoint-attacks-op-ed/","source":"CyberScoop","date_rel":"27 Oct"}]},{"title":"PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw","link":"https://thehackernews.com/2026/10/php-issues-second-windows-security.html","reason":"CVE-2026-111497","category":"News","sources":["CCCS Alerts & Advisories","CyberScoop","Microsoft Security","Rapid7 Blog","Tenable Blog","The Hacker News","Wiz Research"],"coverage":7,"cve_ids":["CVE-2026-111497"],"summary":"PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and\u2026","source":"The Hacker News","date_rel":"26 Oct","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWGYEqFaRxRywsWzBt-2T2G_Jpdp4zy3iV7qI1alNGRaBf_8TMdzRQQb335GhASkVoXD3q9mGkiLjAog4ez9d7DHhl88lkNVvuhI74KiKZP0zZpb2O8yyqyDw12WoYTiGaq1AVfG9TfGcdNhP-DmRwuKJ4Pj4mr9rEo-TVLYxYSpmUogJUSFZFL_VaduQ/s1600/php-windows.jpg","description":"PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but","related":[{"title":"AL26-027 - Critical vulnerability impacting Google Brotli \u2013 CVE-2026-111497","link":"https://cyber.gc.ca/en/alerts-advisories/al26-027-critical-vulnerability-impacting-google-brotli-cve-2026-111497","source":"CCCS Alerts & Advisories","date_rel":"9m ago"},{"title":"Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)","link":"https://www.tenable.com/blog/brotli2shell-frequently-asked-questions-for-google-brotli-decoder-cve-2026-111497","source":"Tenable Blog","date_rel":"27 Oct"},{"title":"Experts temper emergency-level alarms over critical Brotli defect","link":"https://cyberscoop.com/brotli-critical-vulnerability-decompression-library-node2shell-broccoli2shell/","source":"CyberScoop","date_rel":"27 Oct"},{"title":"CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder","link":"https://www.rapid7.com/blog/post/etr-cve-2026-111497-critical-out-of-bounds-write-in-the-node-js-brotli-decoder","source":"Rapid7 Blog","date_rel":"26 Oct"},{"title":"Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability","link":"https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js","source":"Wiz Research","date_rel":"25 Oct"},{"title":"CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497","source":"Microsoft Security","date_rel":"25 Oct"}]},{"title":"PHP2Shell: No login, no app code, no warning. What next?","link":"https://www.theregister.com/security/2026/10/26/partner-content-no-login-no-app-code-no-warning-what-next/5305336","reason":"CVE-2026-109618","category":"News","sources":["CCCS Alerts & Advisories","CISA Alerts & Advisories","Cisco Security Advisories","ESET WeLiveSecurity","Tenable Blog","The Register Security"],"coverage":6,"cve_ids":["CVE-2026-109618","CVE-2026-109619"],"summary":"If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and CVE-2026-109619 (nicknamed \"PHP2Shell\"), let an unauthenticated\u2026","source":"The Register Security","date_rel":"26 Oct","thumbnail":"https://image.theregister.com/?imageId=5305339&width=800","description":"If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and CVE-2026-109619 (nicknamed \"PHP2Shell\"), let an unauthenticated attacker run code on a server with nothing more than a crafted web request. Both carry a CVSS v4.0 score of 9.2, every earlier release is affected, and exploitation in the wild has been reported. The patch is the easy part. The hard part is finding every copy of PHP you own, because PHP rarely shows up where you expect it. This post covers what the flaws are, how far\u2026","related":[{"title":"Vulnerabilities in PHP Affecting Cisco Products: October 2026","link":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Vulnerabilities%20in%20PHP%20Affecting%20Cisco%20Products:%20October%202026%26vs_k=1","source":"Cisco Security Advisories","date_rel":"16h ago"},{"title":"AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 2","link":"https://cyber.gc.ca/en/alerts-advisories/al26-026-critical-vulnerabilities-impacting-php-cve-2026-109618-cve-2026-109619","source":"CCCS Alerts & Advisories","date_rel":"19h ago"},{"title":"Discover and remediate PHP2Shell exposure with Tenable","link":"https://www.tenable.com/blog/discover-and-remediate-php2shell-exposure-with-tenable","source":"Tenable Blog","date_rel":"26 Oct"},{"title":"PHP2Shell: What to know about two critical PHP flaws","link":"https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/","source":"ESET WeLiveSecurity","date_rel":"26 Oct"},{"title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"26 Oct"}]},{"title":"Worm armed 42 GitHub repos by hiding a payload too big to fail","link":"https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570","reason":"Github","category":"News","sources":["Check Point Research","Dark Reading","The Hacker News","The Register Security","Wiz Research"],"coverage":5,"cve_ids":[],"summary":"A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to\u2026","source":"The Register Security","date_rel":"26 Oct","thumbnail":"https://image.theregister.com/?imageId=5242669&width=800","description":"A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking accounts as early as July and using a stealthy payload built to stay hidden from GitHub and automated scanners, according to JFrog researchers. Threat hunters at SafeDep, an open source supply chain security firm, first spotted the \u201ctestmetest\u201d npm campaign last week, identifying 18 packages linked to the same operator between October 19 and October 25, including releases containing credential-stealing malware. As with earlier npm worms, the\u2026","related":[{"title":"Tricks from the Past deployed via signed ChatGPT and Claude binaries","link":"https://research.checkpoint.com/2026/tricks-from-the-past-deployed-via-signed-chatgpt-and-claude-binaries/","source":"Check Point Research","date_rel":"23h ago"},{"title":"LiteLLM supply chain attack started with an exposed master key","link":"https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544","source":"The Register Security","date_rel":"26 Oct"},{"title":"'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets","link":"https://www.darkreading.com/cyberattacks-data-breaches/gheist-stolen-github-tokens-cloud-secrets","source":"Dark Reading","date_rel":"26 Oct"},{"title":"The Pwn Request Reckoning: What Still Works Against GitHub Actions","link":"https://www.wiz.io/blog/github-actions-security-pwn-request-reckoning","source":"Wiz Research","date_rel":"26 Oct"},{"title":"Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs","link":"https://thehackernews.com/2026/10/gheist-uses-stolen-github-tokens-to.html","source":"The Hacker News","date_rel":"26 Oct"},{"title":"Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles","link":"https://www.wiz.io/blog/gheist-attempted-scaled-abuse-of-stolen-github-tokens-stumbles","source":"Wiz Research","date_rel":"25 Oct"}]},{"title":"Hackers Actively Exploiting New Oracle EBS RCE Vulnerability","link":"https://cybersecuritynews.com/oracle-ebs-rce-exploited/","reason":"Oracle","category":"News","sources":["Bleeping Computer","Cyber Security News","SecurityWeek","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-101767"],"summary":"Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused reported exploratory exploit attempts against its decoy\u2026","source":"Cyber Security News","date_rel":"2h ago","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Oracle-EBS-RCE-Vulnerability.webp","description":"Hackers have begun testing a critical Oracle E-Business Suite vulnerability that can let them run commands without logging in. Threat intelligence firm Defused reported exploratory exploit attempts against its decoy systems on October 27, 2026. However, these observations do not confirm successful attacks against customer systems, and Oracle had already released a patch before the activity was detected. Tracked as CVE-2026-101767, the flaw carries a critical CVSS score of 9.8. Horizon3.ai discovered the issue and reported it to Oracle on July 24. Oracle fixed it on October 20 through its\u2026","related":[{"title":"Hackers now scanning systems for recently-patched Oracle flaw","link":"https://www.bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/","source":"Bleeping Computer","date_rel":"36m ago"},{"title":"Hackers Start Probing Fresh Oracle EBS Vulnerability","link":"https://www.securityweek.com/hackers-start-probing-fresh-oracle-ebs-vulnerability/","source":"SecurityWeek","date_rel":"3h ago"},{"title":"ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws","link":"https://thehackernews.com/2026/10/shinyhunters-exploited-oracle.html","source":"The Hacker News","date_rel":"6h ago"}]},{"title":"Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits","link":"https://thehackernews.com/2026/10/anthropics-unreleased-ai-model-chains.html","reason":"Chrome","category":"News","sources":["Google Project Zero","Malwarebytes Labs","The Hacker News"],"coverage":3,"cve_ids":[],"summary":"An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were\u2026","source":"The Hacker News","date_rel":"4h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSMl2C6S6mb-smamI35fLYotcPaercI_2PIgtuF78Q7PtQcFvFUKXkModTW4nRCh6FC7Xht2BltSGImRS2QNR4Lnc22S7UBU9V_0UDcZi2iDNXSlCJDqD4ApmJPqA_boFokj_9dTWKdzhjIgNt_Y47zumx_c5vrcJn5Vd-Xaowafv4HGCzCcqgDV4GGpo/s1600/hacker-chain.jpg","description":"An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of","related":[{"title":"Chrome and Firefox updates fix serious security flaws. Install them now","link":"https://www.malwarebytes.com/blog/ai/2026/10/chrome-and-firefox-updates-fix-serious-security-flaws-install-them-now","source":"Malwarebytes Labs","date_rel":"1h ago"},{"title":"Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines","link":"https://projectzero.google/2026/10/fuzzing-v-AI.html","source":"Google Project Zero","date_rel":"27 Oct"}]},{"title":"Cisco open sources tool for detecting AI agents on hacking sprees","link":"https://www.theregister.com/security/2026/10/28/cisco-open-sources-tool-for-detecting-ai-agents-on-hacking-sprees/5305867","reason":"Teams","category":"News","sources":["Cisco Security Advisories","Dark Reading","The Register Security"],"coverage":3,"cve_ids":[],"summary":"Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they did with the Hugging Face hack \u2013 or worse. It\u2019s called Project\u2026","source":"The Register Security","date_rel":"56m ago","thumbnail":"https://image.theregister.com/?imageId=5259466&width=800","description":"Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they did with the Hugging Face hack \u2013 or worse. It\u2019s called Project Quarry, and it aims to provide a \u201cshared language\u201d for evaluating agent behavior, along the lines of what Snort, which Cisco also maintains, did for detecting malicious network traffic and what YARA did for rule-based malware identification. Most detection tools rely on specific interactions with an AI model or agent. Did it attempt prompt injection? Or did the agent call an\u2026","related":[{"title":"External Teams Chats Anchor 15-Minute Malware Delivery","link":"https://www.darkreading.com/cloud-security/email-bombing-external-teams-chats-repeatable-access-path","source":"Dark Reading","date_rel":"16h ago"},{"title":"Cisco Unified Communications Products Security Hardening Release: October 2026","link":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Communications%20Products%20Security%20Hardening%20Release:%20October%202026%26vs_k=1","source":"Cisco Security Advisories","date_rel":"22h ago"}]},{"title":"Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass","link":"https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html","reason":"Adobe","category":"News","sources":["CCCS Alerts & Advisories","CISA Alerts & Advisories","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-48356"],"summary":"Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation\u2026","source":"The Hacker News","date_rel":"1h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3z7SDPF49VtrfeTS8qZD9-Rv1ne3ZUL2KLJZklOlASYXMnjBQXmmIYZ-wAC9PR248ntUBTyZLq2G6TPVYLZ-aEN7fDFc4pcEhSbt_vj36JTbujGJ2UHTbxFDUOiDvYDyKl7NpCvSMlySdqWjPhyphenhyphenFUNTkC38Ej0biyWHeF1u4kFHCe4tkJjgCW6RCHttx_/s1600/adobe-main.jpg","description":"Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.","related":[{"title":"Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges","link":"https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html","source":"The Hacker News","date_rel":"7h ago"},{"title":"Adobe security advisory (AV26-697) \u2013 Update 1","link":"https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-697","source":"CCCS Alerts & Advisories","date_rel":"16h ago"},{"title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"27 Oct"}]},{"title":"Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads","link":"https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html","reason":"Apple","category":"News","sources":["404 Media","Bleeping Computer","SANS Internet Storm Center","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-86950"],"summary":"Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds\u2026","source":"The Hacker News","date_rel":"22h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqZx9ghfLBFufN5Q4s1dq2U1rXwenlfzU7UsqQfLWn3AEUe5CX3krGuvC6DM4mF2T9MmscvntBNxmgU7UjNOnfJQteKvuAs-4Nq0vJ3TnTkuFy1TRO3ibdh2Ekqi_WqiInvPkXjYlnvrCuYb5mb8neOOqBbmf_034wh8MPOLPKW2Nvvezpb2LFNXPbeUa6/s1600/apple-patch.jpg","description":"Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for the flaw were released last month by Apple in","related":[{"title":"Apple backports CoreGraphics zero-day patches to older iPhones","link":"https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/","source":"Bleeping Computer","date_rel":"27 Oct"},{"title":"Apple Patches for October 2026, (Mon, Oct 26th)","link":"https://isc.sans.edu/diary/rss/33458","source":"SANS Internet Storm Center","date_rel":"27 Oct"},{"title":"iPhone Duo Users Are Already Seeing a Big Old Crease in the Middle of Their $2,000 Foldable iPhone","link":"https://www.404media.co/iphone-duo-crackgate-crease-folding-phone/","source":"404 Media","date_rel":"26 Oct"}]},{"title":"Nefilim and Hive ransomware affiliate gets 70 months in prison","link":"https://www.bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison/","reason":"Ransomware Affiliate Nefilim","category":"News","sources":["Bleeping Computer","CyberScoop"],"coverage":2,"cve_ids":[],"summary":"A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021.","source":"Bleeping Computer","date_rel":"3h ago","thumbnail":"","description":"","related":[{"title":"Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison","link":"https://cyberscoop.com/nefilim-hive-ransomware-affiliate-artem-stryzhak-sentenced/","source":"CyberScoop","date_rel":"18h ago"}]}],"worth_reading":[],"kev_watch":[],"vuln_watch":[{"id":"CVE-2026-65145","vendor":"NVIDIA","product":"NeMo Agent Toolkit","severity":"CRITICAL","score":10.0,"description":"NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information di\u2026","cwe":"CWE-306","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/NVIDIA/product-security/tree/main/2026/5912","https://nvd.nist.gov/vuln/detail/CVE-2026-65145","https://www.cve.org/CVERecord?id=CVE-2026-65145"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-65145"},{"id":"CVE-2026-105781","vendor":"Adobe","product":"Adobe Campaign Classic","severity":"CRITICAL","score":10.0,"description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker \u2026","cwe":"CWE-89","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/campaign/apsb26-162.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-105781"},{"id":"CVE-2026-104351","vendor":"Adobe","product":"Adobe Campaign Classic","severity":"CRITICAL","score":9.9,"description":"Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit\u2026","cwe":"CWE-94","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/campaign/apsb26-162.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-104351"},{"id":"CVE-2026-104353","vendor":"Adobe","product":"Adobe Campaign Classic","severity":"CRITICAL","score":9.9,"description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-\u2026","cwe":"CWE-78","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/campaign/apsb26-162.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-104353"},{"id":"CVE-2026-105489","vendor":"Adobe","product":"Adobe Campaign Classic","severity":"CRITICAL","score":9.9,"description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privil\u2026","cwe":"CWE-89","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/campaign/apsb26-162.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-105489"},{"id":"CVE-2026-105780","vendor":"Adobe","product":"Adobe Campaign Classic","severity":"CRITICAL","score":9.9,"description":"Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arb\u2026","cwe":"CWE-863","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.adobe.com/trust/security/products/campaign/apsb26-162.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-105780"},{"id":"CVE-2026-18450","vendor":"SMCI","product":"X12SPI","severity":"CRITICAL","score":9.8,"description":"The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.","cwe":"CWE-306","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.004,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2026_1"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-18450"},{"id":"CVE-2026-92885","vendor":"WordPress","product":"Qode Membership","severity":"CRITICAL","score":9.8,"description":"The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic \u2026","cwe":"CWE-287","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0037,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054","https://www.wordfence.com/threat-intel/vulnerabilities/id/26bca6c2-0999-4cf6-9c4e-ddaf528ef808?source=cve"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-92885"},{"id":"CVE-2026-76934","vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","severity":"CRITICAL","score":9.8,"description":"Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 b\u2026","cwe":"CWE-121","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0052,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-140/index.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-76934"},{"id":"CVE-2026-76938","vendor":"Hitachi","product":"JP1/Automatic Job Management System 3 - Manager","severity":"CRITICAL","score":9.8,"description":"Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.\n\n\nThis issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.","cwe":"CWE-290","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0064,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-142/index.html"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-76938"}],"vendor_spikes":[{"vendor":"Mozilla","count":174,"critical_count":0},{"vendor":"WordPress","count":98,"critical_count":4},{"vendor":"Google","count":55,"critical_count":0},{"vendor":"Tanium","count":31,"critical_count":0},{"vendor":"SemanticMediaWiki","count":21,"critical_count":0},{"vendor":"Hitachi","count":19,"critical_count":18},{"vendor":"WatchGuard","count":18,"critical_count":0},{"vendor":"Microsoft","count":16,"critical_count":1},{"vendor":"asterisk","count":16,"critical_count":0},{"vendor":"redaxo","count":15,"critical_count":1}],"epss_risers":[],"developing_map":{"https://thehackernews.com/2026/10/php-issues-second-windows-security.html":6},"trending_count":14,"new_cve_count":728,"has_news_data":true,"has_cve_data":true,"news_for_cve":{"CVE-2026-111497":{"anchor":"#dev-2","rank":2,"coverage":7},"CVE-2026-109618":{"anchor":"#dev-3","rank":3,"coverage":6},"CVE-2026-109619":{"anchor":"#dev-3","rank":3,"coverage":6},"CVE-2026-101767":{"anchor":"#dev-5","rank":5,"coverage":4},"CVE-2026-48356":{"anchor":"#dev-8","rank":8,"coverage":3},"CVE-2026-86950":{"anchor":"#dev-9","rank":9,"coverage":4}}}