Main Menu

CVE Vulnerability Alerts

Application Security
Attackers Probe Oracle EBS SQL Injection CVE-2026-101767
October 28, 2026
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched last week.
AI Security
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
October 28, 2026
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Application Security
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
October 28, 2026
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.
CVE Vulnerability Alerts
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
October 28, 2026
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.
Application Security
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
October 28, 2026
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM and PhysX products.
Application Security
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
October 28, 2026
Google's Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the sandbox.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
October 27, 2026
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked group suspected.
Application Security
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
October 27, 2026
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of cloud environments exposed.
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
October 27, 2026
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
October 27, 2026
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
Load More
Trending
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Phishers Abuse Power BI Dashboards to Install ScreenConnect
ClickFix Variant Smuggles Payloads Through Browser Cache
Nikkei Discloses M365 Breach, 9,000 Spoofed Emails Sent
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
Ex-Air Force Members Sentenced to 189 Months for BEC Scams
Times Car Breach Exposes 6.6 Million Japanese Car-Sharing Accounts
Over 16,000 Supabase Databases Exposed Due to Misconfiguration

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.