{"date_iso":"2026-11-01","date_human":"Sunday, November 1, 2026","generated_utc":"2026-11-01 12:57 UTC","read_minutes":5,"patch_tuesday":false,"top_stories":[{"title":"Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities","link":"https://cybersecuritynews.com/google-launches-gemini-4-carbon/","reason":"Google","category":"News","sources":["CrowdStrike Blog","Cyber Security News","Microsoft Security","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-111497"],"summary":"Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws , test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and\u2026","source":"Cyber Security News","date_rel":"31 Oct","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Google-launches-Gemini-4-Carbon-With-state-of-the-art-cybersecurity-Capabilities.webp","description":"Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws , test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and coding work that can take days. Access will begin with selected cyber defenders, not a public launch. According to Google\u2019s announcement , Carbon combines stronger cybersecurity skills with improved handling of long tasks. Google says internal teams have seen it work through dead ends while tracing subtle bugs across large codebases and low-level\u2026","related":[{"title":"CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder","link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497","source":"Microsoft Security","date_rel":"31 Oct"},{"title":"CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud","link":"https://www.crowdstrike.com/en-us/blog/crowdstrike-expands-threat-hunting-across-ai-and-google-cloud/","source":"CrowdStrike Blog","date_rel":"30 Oct"},{"title":"Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities","link":"https://thehackernews.com/2026/10/googles-gemini-4-carbon-leads.html","source":"The Hacker News","date_rel":"29 Oct"}]},{"title":"Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers","link":"https://www.theregister.com/security/2026/10/29/suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-servers/5306456","reason":"Linux","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","The Hacker News","The Register Security"],"coverage":4,"cve_ids":["CVE-2026-98432"],"summary":"Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to\u2026","source":"The Register Security","date_rel":"29 Oct","thumbnail":"https://image.theregister.com/?imageId=5304691&width=800","description":"Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Korea. The attackers also honed in on US government-affiliated firewalls. \u201cWithin hours of compromising a US government-affiliated firewall, they had tunneled into the internal network, compromised a third server using the same PHP2Shell\u2026","related":[{"title":"Linux security advisory (AV26-1108)","link":"https://cyber.gc.ca/en/alerts-advisories/linux-security-advisory-av26-1108","source":"CCCS Alerts & Advisories","date_rel":"30 Oct"},{"title":"Critical Linux kernel flaw allows remote root attacks on MPTCP servers","link":"https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/","source":"Bleeping Computer","date_rel":"30 Oct"},{"title":"Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions","link":"https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html","source":"The Hacker News","date_rel":"29 Oct"}]},{"title":"Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access","link":"https://thehackernews.com/2026/10/attackers-chain-three-ivanti-connect.html","reason":"Ivanti","category":"News","sources":["CCCS Alerts & Advisories","CISA Alerts & Advisories","The Hacker News"],"coverage":3,"cve_ids":["CVE-2026-111357"],"summary":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active\u2026","source":"The Hacker News","date_rel":"31 Oct","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeqP4vPt6j2lLPFj77A_1OthmSKb8mItfBrX_q8sQCAUVgTry1FxKizDI2SCLS4CglfjgbVkaMDN8ainqoOZm2pdaF6xw7sU4STZhwIFPCLSz84YXQTVx2tquPo7YJsZhgOWcD3V_w5td9BA_vVuOu1cFcrgL3SXyLF4E24IyGotrzDcbJ-M1mA85biDuW/s1600/1000120841.jpg","description":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - CVE-2026-111357 (CVSS score: 8.8) - A missing authentication for a critical function vulnerability that could allow a","related":[{"title":"Ivanti security advisory (AV26-1035) - Update 2","link":"https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-1035","source":"CCCS Alerts & Advisories","date_rel":"30 Oct"},{"title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","link":"https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog","source":"CISA Alerts & Advisories","date_rel":"30 Oct"}]},{"title":"Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw","link":"https://thehackernews.com/2026/10/hackers-actively-exploit-highly.html","reason":"Drupal","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","SecurityWeek","The Hacker News"],"coverage":4,"cve_ids":["CVE-2026-118539"],"summary":"Drupal has warned that threat actors are exploiting a \"highly critical\" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization\u2026","source":"The Hacker News","date_rel":"30 Oct","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitgPkf4uToEgXwcfmDEKipEveRL2l0PEz6WIegAc2uWyf5_khO7Scgu6MpWHRovED7S-4sKJb4o88JsJT8NI8zB8WCBo04Q9TrEVNJa-08EbxP_zdPkaA7wsBEPIjXbApW1StdY8JunSewAi9TNrAcMwYZjqSsVktddqQ0uIi8-rUzXq1LMMLBHBdccapz/s1600/drupal-rce.jpg","description":"Drupal has warned that threat actors are exploiting a \"highly critical\" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. \"This module enables you to sell goods and services to customers through an included shopping cart","related":[{"title":"Drupal security advisory (AV26-1105)","link":"https://cyber.gc.ca/en/alerts-advisories/drupal-security-advisory-av26-1105","source":"CCCS Alerts & Advisories","date_rel":"30 Oct"},{"title":"Drupal Commerce Core Vulnerability Exploited Against Online Stores","link":"https://www.securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/","source":"SecurityWeek","date_rel":"30 Oct"},{"title":"Drupal warns of critical Commerce Core flaw exploited in attacks","link":"https://www.bleepingcomputer.com/news/security/drupal-warns-of-critical-commerce-core-flaw-exploited-in-attacks/","source":"Bleeping Computer","date_rel":"30 Oct"}]},{"title":"NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection","link":"https://thehackernews.com/2026/11/netamloader-malware-targets-government.html","reason":"Windows","category":"News","sources":["Cyber Security News","The Hacker News"],"coverage":2,"cve_ids":[],"summary":"Cybersecurity researchers have disclosed details of what has been described as a \"highly sophisticated infection chain\" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted\u2026","source":"The Hacker News","date_rel":"5h ago","thumbnail":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy0oLNj9TVg8ifLKdJSg4HH1EhN3m_OBldd7wEIeVoQSHtFXSmsiPdmf-njsPD-CbVHY8NckeW2N9rN8-CTnp81zaeFq-ISj04O7ihoj5HgnvJT_zY_0fdC8vCcd5LXL8Mx9ym1fPI5GMrEtjxZoEiernCr_CZwLocgtrJsKZzixEnYUe2WmkehWLNR2hx/s1600/windows-hacker.jpg","description":"Cybersecurity researchers have disclosed details of what has been described as a \"highly sophisticated infection chain\" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and involves the deployment of a previously undocumented .NET assembly-loading framework codenamed","related":[{"title":"Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours","link":"https://cybersecuritynews.com/malicious-claude-code-extension-with-cursor/","source":"Cyber Security News","date_rel":"31 Oct"}]},{"title":"Hackers steal $6.3 billion from Binance in record crypto heist","link":"https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist/","reason":"Exchange","category":"Media","sources":["Ars Technica Security","Bleeping Computer","The Hacker News","The Register Security"],"coverage":4,"cve_ids":[],"summary":"Binance has suspended all withdrawals after the world\u2019s largest cryptocurrency exchange fell victim to what appears to be the biggest heist in history. The exchange put the \u201cestimated total impact\u201d of the hack at about\u2026","source":"Ars Technica Security","date_rel":"30 Oct","thumbnail":"https://cdn.arstechnica.net/wp-content/uploads/2026/10/binance-500x500.jpg","description":"Binance has suspended all withdrawals after the world\u2019s largest cryptocurrency exchange fell victim to what appears to be the biggest heist in history. The exchange put the \u201cestimated total impact\u201d of the hack at about $6.3 billion and said around $3 billion of affected assets, mainly stablecoins that act as cash for the crypto market, had been frozen. But analysts at Elliptic said the attacker had changed about $3.3 billion into digital assets that could not be frozen and was working to cash those out as traditional currency. Read full article Comments","related":[{"title":"Binance links $6.3 billion crypto theft to compromised DevOps laptop","link":"https://www.bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop/","source":"Bleeping Computer","date_rel":"30 Oct"},{"title":"In the year AI re-wrote the infosec rulebook, it\u2019s comforting to know crypto exchanges still have bad security","link":"https://www.theregister.com/security/2026/10/30/in-the-year-ai-re-wrote-the-infosec-rulebook-its-comforting-to-know-crypto-exchanges-still-have-bad-security/5306539","source":"The Register Security","date_rel":"30 Oct"},{"title":"Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen","link":"https://thehackernews.com/2026/10/binance-suffers-security-breach.html","source":"The Hacker News","date_rel":"30 Oct"},{"title":"Binance probes potential $5.8 billion crypto-theft hack","link":"https://www.bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack/","source":"Bleeping Computer","date_rel":"29 Oct"}]},{"title":"Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours","link":"https://cybersecuritynews.com/60000-attacks-targeting-wordpress/","reason":"Wordpress","category":"News","sources":["Cyber Security News","SecurityWeek","The Hacker News"],"coverage":3,"cve_ids":[],"summary":"Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24\u2026","source":"Cyber Security News","date_rel":"31 Oct","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/60000-Attacks-Targeting-WordPress.webp","description":"Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471 blocked attempts over 24 hours. These are attack attempts, not confirmed website compromises, and the figure does not establish how many individual sites were targeted. WordPress released version 7.1.4 on October 28, 2026, addressing 22 security vulnerabilities. The update closes the code execution weakness alongside stored cross-site scripting, information disclosure, and permission issues. The official\u2026","related":[{"title":"PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress","link":"https://www.securityweek.com/php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress/","source":"SecurityWeek","date_rel":"30 Oct"},{"title":"WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours","link":"https://thehackernews.com/2026/10/wordpress-rce-flaw-draws-nearly-63000.html","source":"The Hacker News","date_rel":"30 Oct"},{"title":"Fresh WordPress Vulnerability in Attackers\u2019 Crosshairs","link":"https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/","source":"SecurityWeek","date_rel":"30 Oct"}]},{"title":"Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks","link":"https://cybersecuritynews.com/apple-warns-iphone-users/","reason":"Apple","category":"News","sources":["404 Media","Cyber Security News","CyberScoop"],"coverage":3,"cve_ids":[],"summary":"Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported\u2026","source":"Cyber Security News","date_rel":"31 Oct","thumbnail":"https://cybersecuritynews.com/wp-content/uploads/2026/10/Apple-Warns-iPhone-Users.webp","description":"Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying it was separate from August\u2019s alerts and linked to new attacks. \u201cToday\u2019s notification is being sent to targeted users in 99 countries, and to date we have notified users in over 150 countries in total,\u201d Apple said in the notice shared by Raiu. The company did not name the attackers or connect the warnings to any specific region\u2026","related":[{"title":"Apple notifications alert victims in 99 countries about mercenary spyware infections","link":"https://cyberscoop.com/apple-spyware-notifications-pall-mall-process/","source":"CyberScoop","date_rel":"30 Oct"},{"title":"Apple Is Entering Its Slop Era","link":"https://www.404media.co/apple-is-entering-its-slop-era/","source":"404 Media","date_rel":"30 Oct"}]},{"title":"Claude Model Builds Exploits Across Major Browsers & OSes","link":"https://www.darkreading.com/application-security/claude-model-exploits-major-browsers-oses","reason":"Android","category":"News","sources":["Bleeping Computer","Dark Reading"],"coverage":2,"cve_ids":["CVE-2026-58882"],"summary":"An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.","source":"Dark Reading","date_rel":"29 Oct","thumbnail":"https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt626614753803fdf0/6ae260b6848b397b5d1859e3/anthropic_Algi_Febri_Sugita_shutterstock.jpg?width=720&quality=80&disable=upscale","description":"","related":[{"title":"New Android SMS of Death exploit can remotely crash unpatched phones","link":"https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/","source":"Bleeping Computer","date_rel":"21h ago"}]},{"title":"CISA says max severity GitLab flaw now exploited in the wild","link":"https://www.bleepingcomputer.com/news/security/hackers-now-exploiting-max-severity-gitlab-flaw-in-attacks/","reason":"Gitlab","category":"News","sources":["Bleeping Computer","CCCS Alerts & Advisories","SecurityWeek"],"coverage":3,"cve_ids":["CVE-2026-97229"],"summary":"Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).","source":"Bleeping Computer","date_rel":"30 Oct","thumbnail":"","description":"","related":[{"title":"Max-Severity GitLab Vulnerability Exploited Against Alpine Linux","link":"https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/","source":"SecurityWeek","date_rel":"30 Oct"},{"title":"GitLab security advisory (AV26-1028) - Update 1","link":"https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-1028","source":"CCCS Alerts & Advisories","date_rel":"29 Oct"}]}],"worth_reading":[],"kev_watch":[],"vuln_watch":[{"id":"CVE-2026-120189","vendor":"D-Link","product":"DIR-505","severity":"CRITICAL","score":10.0,"description":"A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overfl\u2026","cwe":"CWE-119","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/Walnut1337/DIR-505_filename_rce/tree/main/poc","https://vuldb.com/cve/CVE-2026-120189","https://vuldb.com/submit/1027185"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120189"},{"id":"CVE-2026-120195","vendor":"WAVLINK","product":"WL-WN579A3-A","severity":"CRITICAL","score":10.0,"description":"A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument w\u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/pipiyyb/cve/blob/main/WAVLINK_WN579A3_CVE_wzdgwMesh_wlan_ssid.md","https://vuldb.com/cve/CVE-2026-120195","https://vuldb.com/submit/914922"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120195"},{"id":"CVE-2026-120198","vendor":"WAVLINK","product":"WL-WN530BE1-A","severity":"CRITICAL","score":10.0,"description":"A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to la\u2026","cwe":"CWE-74","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/pipiyyb/cve/blob/main/WN530BE1.md","https://vuldb.com/cve/CVE-2026-120198","https://vuldb.com/submit/918551"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120198"},{"id":"CVE-2026-120196","vendor":"WAVLINK","product":"WN579X3-D","severity":"CRITICAL","score":9.9,"description":"A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote.\u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/pipiyyb/cve/blob/main/WN579X3-D(en).md","https://vuldb.com/cve/CVE-2026-120196","https://vuldb.com/submit/916941"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120196"},{"id":"CVE-2026-120197","vendor":"WAVLINK","product":"WL-WN530HG4B","severity":"CRITICAL","score":9.9,"description":"A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotel\u2026","cwe":"CWE-77","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/pipiyyb/cve/blob/main/WL-WN530HG4B.md","https://vuldb.com/cve/CVE-2026-120197","https://vuldb.com/submit/917074"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120197"},{"id":"CVE-2026-118235","vendor":"WordPress","product":"SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications","severity":"CRITICAL","score":9.8,"description":"The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to mi\u2026","cwe":"CWE-434","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0074,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://plugins.svn.wordpress.org/simple-form/trunk/","https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.2/app/Ajax/Tables.php#L67","https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.2/app/Ajax/Tables.php#L973"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-118235"},{"id":"CVE-2026-120201","vendor":"dromara","product":"Jpom","severity":"CRITICAL","score":9.8,"description":"Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value l\u2026","cwe":"CWE-943","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://github.com/dromara/Jpom","https://github.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/common/interceptor/LoginInterceptor.java#L146","https://github.com/dromara/Jpom/issues/121"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120201"},{"id":"CVE-2026-120209","vendor":"anji-plus","product":"AJ-Report","severity":"CRITICAL","score":9.8,"description":"AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts\u2026","cwe":"CWE-321","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://gitee.com/belief-team/report","https://gitee.com/belief-team/report/blob/V1.7.1/report-core/src/main/java/com/anjiplus/template/gaea/business/util/JwtUtil.java","https://gitee.com/belief-team/report/issues/IKRV6T"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-120209"},{"id":"CVE-2026-118636","vendor":"Apache","product":"Apache MINA","severity":"CRITICAL","score":9.8,"description":"**UNSUPPORTED WHEN ASSIGNED**\u00a0\n\nJavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an\napplication that puts it in front of an untrusted peer is open to gadget-c\u2026","cwe":"CWE-502","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","fix":false,"fix_url":"","refs":["https://lists.apache.org/thread.html/h76nwcrkvsffhsk2kq6cjzc6srtnty7x","https://www.cve.org/CVERecord?id=CVE-2026-118636","http://www.openwall.com/lists/oss-security/2026/10/31/3"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-118636"},{"id":"CVE-2026-103882","vendor":"WordPress","product":"Acadlix LMS \u2013 AI Quiz Maker, Online Exam & Course Plugin for WordPress","severity":"CRITICAL","score":9.1,"description":"The Acadlix LMS \u2013 AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versi\u2026","cwe":"CWE-22","kev":false,"kev_action":"","kev_due":"","kev_added":"","epss":0.0079,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","fix":false,"fix_url":"","refs":["https://plugins.trac.wordpress.org/browser/acadlix/tags/1.1.8/includes/Common/Assets/Manager.php#L570","https://plugins.trac.wordpress.org/browser/acadlix/tags/1.1.8/includes/Common/REST/Front/FrontQuizController.php#L680","https://plugins.trac.wordpress.org/browser/acadlix/tags/1.1.8/includes/Common/REST/Front/FrontQuizController.php#L692"],"url":"https://cve.blackmesa.ca/?q=CVE-2026-103882"}],"vendor_spikes":[{"vendor":"WordPress","count":21,"critical_count":2},{"vendor":"Unknown","count":14,"critical_count":0},{"vendor":"Microsoft","count":7,"critical_count":0},{"vendor":"FFmpeg","count":6,"critical_count":0},{"vendor":"WAVLINK","count":4,"critical_count":4}],"epss_risers":[],"developing_map":{"https://cybersecuritynews.com/google-launches-gemini-4-carbon/":3},"trending_count":18,"new_cve_count":73,"has_news_data":true,"has_cve_data":true,"news_for_cve":{"CVE-2026-111497":{"anchor":"#dev-1","rank":1,"coverage":4},"CVE-2026-98432":{"anchor":"#dev-2","rank":2,"coverage":4},"CVE-2026-111357":{"anchor":"#dev-3","rank":3,"coverage":3},"CVE-2026-118539":{"anchor":"#dev-4","rank":4,"coverage":4},"CVE-2026-58882":{"anchor":"#dev-9","rank":9,"coverage":2},"CVE-2026-97229":{"anchor":"#dev-10","rank":10,"coverage":3}}}