// live feed
Ongoing safety incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts rearward all one.
live35
critical15
not completely patched18
## 191 incidents in the final year
through Oct 22, 2026
crit 4 · elevated 3 · med 2 · low 1 · upd ½severity-weighted: crucial 4 · elevated 3 · average 2 · low 1 · update ½lessmore
Get an email whenever a new important safety event drops. No spam, unsubscribe any time.
medium
live
partial fix
since Oct 22, 2026updated Oct 22, 2026, 16:53 UTC
Major U.S. banks detect unauthorized third-party AI agents inner client accounts
› Online banking accounts at important U.S. banks (Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo, Citi)
Axios reports that important U.S. banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, are detecting third-party AI agents functioning inner client accounts. In most cases the delegate logs in alongside the customer's own credentials and permission, which breaks financial institution rules that necessitate group to log in themselves. Some banks additionally saw agents communication call centers or obtain actions that appeared autonomous of person instructions, and executives say they frequently can't inform a individual from an agent, or an authorized delegate from a rogue one. No document takeovers, fraud losses or particular AI delegate products have been reported. Morgan Stanley is blocking third-party agents and JPMorgan, Bank of America and Citi are restricting them. Don't provision an AI delegate your financial institution username and password.
critical
live
patched
since Oct 21, 2026updated Oct 22, 2026, 16:00 UTC
GitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)
› GitLab CE/EE (self-managed)
GitLab released a crucial place on Oct 21 2026 for CVE-2026-110264: an entire figure overflow in the bundled Onigmo / regex compiler that can authorize an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; all CE/EE type from 7.0 (2014) is in range. Instances that lone applied the Oct 12 regex fix remain susceptible and must upgrade again.
critical
live
unpatched
since Oct 21, 2026updated Oct 22, 2026, 16:56 UTC
Linux kernel: unpatched ZDI bug reports alongside repro particulars leaked to community LKML (ksmbd RCE, CVSS 9.0)
› Linux kernel: ksmbd (in-kernel SMB server) and SMB Direct, skbuff/NFQUEUE networking, vmwgfx, nvmet
On Oct 21, Trend Micro's Zero Day Initiative sent multiple unpatched Linux kernel exposure reports to [email protected] but Cc'd the community linux-kernel and subsystem lists, so complete specialized particulars (code paths, KASAN traces) are now community before fixes ship. The worst are two ksmbd (in-kernel SMB server) distant code implementation bugs that ZDI scores CVSS 9.0: an SMB Direct entire figure underflow (needs an RDMA equipment and a writable share) and a protocol-dispatch competition (needs a visitant share). Also leaked: an skb_zerocopy local privilege escalation (CVSS 7.8), a vmwgfx out-of-bounds compose LPE, and an nvmet info leak. No CVEs yet and no fixed mainline or stable release; the ksmbd competition fix sits in the ksmbd maintainer tree and an SMB Direct fix is in a branch aimed at Linux 7.5. No exploitation reported. Only machines operating ksmbd are exposed to the RCEs.
critical
live
patched
since Oct 21, 2026updated Oct 22, 2026, 16:00 UTC
LiteLLM 1.107.0 PyPI/Docker supply-chain compromise
› LiteLLM (PyPI + authoritative Docker/GHCR images)
On Oct 21 2026 attackers compromised LiteLLM’s publish pipeline and published malicious litellm==1.107.0 to PyPI (live ~2 hours) affirmative compromised Docker Hub/GHCR tags (v1.107.0, latest, main-latest, main-stable). The wheels instal cook.pth / cook.py / sitecustomize.py that pilfer cloud, developer and AI-tool credentials at all Python startup and open a remote-code loader. Second LiteLLM colony of 2026.
high
live
partial fix
since Oct 21, 2026updated Oct 22, 2026, 15:59 UTC
ISC BIND 9: replayed GSS-TSIG messages corrupt memory, imaginable RCE (CVE-2026-94300)
› ISC BIND 9 (named) DNS server
ISC disclosed a remotely exploitable memory-corruption bug in BIND 9's named on Oct 21. An attacker who captures a GSS-TSIG signed UDP communication (the Kerberos signing used for Active Directory-style energetic DNS updates) can replay it during the negotiated key is motionless valid and, blended alongside crafted queries to a area they control, may get distant code execution, or at smallest collision named. CVSS 8.1 (High). No workaround. Affects BIND 9.11.0 through 9.18.50, 9.20.0 through 9.20.29 and 9.21.0 through 9.21.26. Fixed in 9.20.30 and 9.21.27; ISC lists no 9.18 fix. ISC knows of no energetic exploitation. Debian trixie has a fixed package; Debian bookworm and Ubuntu are motionless waiting.
high
live
patched
since Oct 21, 2026updated Oct 22, 2026, 11:18 UTC
Node.js October 2026 safety releases (Brotli RCE + TLS/DNS highs)
› Node.js
On Oct 21 2026 Node.js shipped safety updates for 22.x, 24.x and 26.x fixing ten vulnerabilities. The header matter is CVE-2026-111497, a high-severity Brotli decoder out-of-bounds compose that can allow distant code implementation whenever attacker-controlled Brotli data is decoded. The identical publish additionally fixes TLS hostname/IP bypasses and DNS NUL truncation, and refreshes the bundled CA shop for the eMudhra incident.
CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069
+6 more
high
live
partial fix
since Oct 21, 2026updated Oct 22, 2026, 16:32 UTC
Railway discloses unauthorized admission to client surroundings variables
› Railway (hosted platform)
On Oct 21 2026 Railway reported anomalous action on systems storing client surroundings variables. An unauthorized third gathering may have accessed encrypted env vars and, for some, obtained decrypted contents (API keys, DB/registry credentials). Railway says it believes this is part of a sequence of attacks on phase companies aimed at compromising AI conclusion providers, and asked upstream providers to revoke keys. Builds were paused platform-wide for ~a day; on Oct 22 they were restored for Enterprise and Pro, alongside Hobby/Free/Trial motionless pending. All users are told to rotate secrets during scoping continues.
critical
live
patched
since Oct 20, 2026updated Oct 22, 2026, 15:19 UTC
Signal calls can remain live following hang-up (RingRTC CVE-2026-113380)
› Signal (RingRTC calling library, @signalapp/ringrtc)
A bug in RingRTC, the open-source archive rearward Signal's sound and video calls, lets the another gathering on a call flood the call's state-machine event queue so a local hang-up gets stuck rearward the backlog, and audio (possibly video) keeps flowing to them following the casualty thinks the call ended. Affects all Signal client (Android, iOS, Desktop) embedding RingRTC before 2.72.0. Fixed in RingRTC 2.72.0 (released Sep 4 2026, disclosed Oct 20); a conceptual PoC is public, no known exploitation.
- Oct 20highEG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerabilitypatched
› EG Secure Solutions SiteGuard Server Edition patched
EG Secure Solutions SiteGuard Server Edition contains an OS command injection exposure which may authorize an attacker to execute arbitrary OS commands alongside base or SYSTEM privileges on the scheme operating the affected product. Added to CISA KEV on 2026-10-20.
CVE-2026-106931
- Oct 20highGMO Onamae Desktop Cloud malware on client VPSpartial fix
› Onamae Desktop Cloud (GMO Internet) partial fix
GMO Internet’s Japanese VPS assistance Onamae Desktop Cloud stated an attacker installed malicious programs in client environments, forcing shutdown of as many as ~26,739 servers alongside no contiguous restart date (mid-October 2026 reporting).
- Oct 20highSiemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerabilitypatched
› Siemens Software Center patched
Siemens Software Center contains an uncontrolled hunt way component exposure that could authorize an authenticated local attacker to location a specially crafted DLL in a directory that the use searches, foremost to arbitrary code implementation alongside the privileges of the affected application. Added to CISA KEV on 2026-10-20.
CVE-2026-110936
unknown
live
partial fix
since Oct 20, 2026updated Oct 22, 2026, 11:19 UTC
HTTP/3 QPACK “Header Accordions” memory-amplification DoS
› HTTP/3 / QPACK stacks (quic-go, Cloudflare quiche, lsquic, Bun, aioquic, h3, Wireshark, …)
FoxIO published investigation (Oct 20 2026) showing that missing or delayed decoded-header limits in QPACK let a small HTTP/3 HEADERS example develop into huge server recollection use (up to ~4000× on Bun). Seven of ten implementations tested were vulnerable; quic-go, Cloudflare quiche, lsquic and Wireshark are patched, during Bun, aioquic/mitmproxy and h3 remained unpatched at publication.
CVE-2025-64702CVE-2026-12523CVE-2025-13945
critical
live
patched
since Oct 19, 2026updated Oct 22, 2026, 16:00 UTC
OpenCode: malicious MCP server can run code on Windows/WSL during sign-in (no CVE)
› OpenCode AI coding delegate (Anomaly) on Windows and WSL
A command-injection flaw in the OpenCode AI coding delegate let a malicious or later-hijacked distant MCP server run PowerShell commands on a developer's Windows or WSL device whenever they started the MCP OAuth sign-in. The server-supplied authority endpoint was passed unescaped to an old type of the open package. Anomaly fixed it in 1.18.33 on Sep 28 without a CVE or advisory, so scanners won't emblem 1.0.137 through 1.18.32. macOS and Linux are not affected. Pillar Security established it and rates it 9.8; no in-the-wild exploitation reported.
critical
live
partial fix
since Oct 18, 2026updated Oct 22, 2026, 16:56 UTC
eMudhra intermediate CA personal keys compromised
› eMudhra / emSign Global TLS intermediates; any client shipping Mozilla-style CA stores
Eight eMudhra Global TLS intermediate CA personal keys were established to be cryptographically feeble / recoverable (researcher study Oct 18). Mozilla, Chrome, Apple and Microsoft blocked the intermediates; eMudhra revoked them Oct 19 and the ECC base was distrusted as a precaution. Downstream runtimes that container their own rely stores (Go, Node.js, Electron, Python certifi, curl, etc.) needed emergency CA-bundle updates so they halt trusting the compromised chains.
CVE-2026-111943CVE-2026-91403
critical
live
partial fix
since Oct 17, 2026updated Oct 22, 2026, 16:56 UTC
PHP2Shell: crucial unauthenticated RCE in PHP core
› PHP
Two crucial remote-code-execution flaws in PHP center (CVE-2026-109618 and CVE-2026-109619, aka “PHP2Shell”) were disclosed first following an embargo leak. Both mark CVSS 9.2 and can let an unauthenticated attacker run code on servers serving PHP web requests, particularly Apache mod_php. Patches shipped Oct 21 2026 (appliance vendors specified as QNAP are motionless preparing fixes); exploitation attempts were observed before and following the patch, and watchTowr / AWS study energetic scanning.
CVE-2026-109618CVE-2026-109619
high
live
partial fix
since Oct 17, 2026updated Oct 22, 2026, 16:32 UTC
OpenCode Console breach exposes users' saved OpenAI / Anthropic / Google API keys
› OpenCode Console (hosted assistance by Anomaly)
On the night of Oct 16 2026 an intruder reached a bequest OpenCode Console scheme that was being decommissioned and may have exposed third-party AI provider keys saved in Console workspaces. OpenCode says 1.4% of Console users (those alongside external providers linked) were affected and tied it to a large-scale distillation attack. Users reported unauthorized charges up to ~$1,700 and several Google Cloud project suspensions. Anthropic and Google revoked/blocked exposed keys; OpenAI refunded drawn credits. The OpenCode app itself (local keys) was not affected.
critical
live
patched
since Oct 16, 2026updated Oct 22, 2026, 11:20 UTC
Plex2Shell: chained Plex Media Server RCE exploited for miners
› Plex Media Server
Four Plex Media Server flaws (CVE-2026-96652/96654/96655/96656), together called Plex2Shell, sequence to unauthenticated admin-token theft and code execution. Researcher Zach Main published particulars Oct 16 and a PoC shortly after; exploitation of internet-facing servers (cryptominers + residential proxies) began by Oct 17. Fixed in 1.43.3.10861 (released before in August); CISA added the sequence to KEV alongside a national deadline of Oct 23.
CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656
- Oct 16highFortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerabilitypatched
› Fortinet Multiple Products patched
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager merge a way traversal exposure that may authorize an authenticated attacker alongside admin overview and at smallest read-write permissions to compose or delete arbitrary records via particular CLI commands. Added to CISA KEV on 2026-10-16.
- Oct 15highAtlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerabilitypatched
› Atlassian Multiple Products patched
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) merge a records or directories accessible to external parties exposure which could authorize an unauthenticated attacker to admission particular records inside the web use base directory in affected versions. Added to CISA KEV on 2026-10-15.
critical
live
partial fix
since Oct 14, 2026updated Oct 22, 2026, 16:56 UTC
Zeabur breach exposes 3.2M env-var records; business to close down
› Zeabur (PaaS)
Zeabur disclosed an October 14–15 2026 safety event in which an attacker used leaked inner credentials stored in plaintext to admission shared clusters in 9 regions, base into 101 Zeabur-managed GCP dedicated servers, and peruse the phase database, exposing ~3.22 myriad environment-variable records throughout 321,810 accounts. Zeabur is winding down: from December 1 2026 shared-cluster services intermission and dedicated servers halt renewing, and on December 31 all services halt and assistance data is deleted. Refund and incident-claim requests near November 30. Users must rotate all concealed stored on Zeabur and migrate off.
- Oct 14highAhsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerabilitypatched
› Ahsay AhsayCBS patched
Ahsay AhsayCBS contains a command injection exposure that could authorize a distant attacker to execute functioning scheme commands via manipulation of the random indicator in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This exposure can be chained alongside CVE-2026-105133. CISA added CVE-2026-105134, CVE-2026-105133 to the Known Exploited Vulnerabilities catalog on 2026-10-14 according to evidence of energetic exploitation.
CVE-2026-105134 · CVE-2026-105133
- Oct 14highCisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerabilitypatched
› Cisco Secure Email Gateway patched
Cisco Secure Email Gateway contains a related way traversal exposure that could authorize an unauthenticated, distant attacker to compose arbitrary records on the underlying functioning system. Added to CISA KEV on 2026-10-14.
- Oct 14highPalo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerabilitypatched
› Palo Alto Networks PAN-OS patched
Palo Alto Networks PAN-OS contains a code injection exposure that could authorize an authenticated attacker alongside network admission to execute arbitrary code alongside base privileges on the firewall. Added to CISA KEV on 2026-10-14.
medium
live
partial fix
since Oct 14, 2026updated Oct 22, 2026, 14:58 UTC
GoDaddy mass-revokes 404,607 TLS certificates complete CP/CPS overview mismatch
› GoDaddy / Starfield TLS certificates (DV, OV, EV)
GoDaddy (Starfield) established that 404,607 TLS certificates carried guideline data (policy OIDs, CPS URI) that didn't equivalent its own published CP/CPS, which under the CA/Browser Forum Baseline Requirements method they must be revoked inside five days. GoDaddy missed the Oct 18 deadline and says the certificates were revoked on Oct 21 2026. Nothing was hacked and no keys leaked, but sites motionless serving a revoked certificate can display browser warnings or rotate into unreachable until the re-issued certificate is installed.
critical
live
patched
since Oct 8, 2026updated Oct 22, 2026, 11:18 UTC
PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)
› Linux kernel networking (host flank of KVM/Firecracker and similar)
Paulos Yibelo / pwn.ai established a Critical Linux networking flaw (CVE-2026-99999, CVSS 9.3) during Vercel’s $1M Sandbox challenge. Guest-controlled checksum metadata can rewrite an IPv4 header following validation, enabling host-memory disclosure and, in lab conditions, guest-to-host code implementation on KVM/Firecracker. Upstream fix merged Oct 2026; presenter kernels need place + reboot. Affects multi-tenant VPS / sandbox providers additional than end-user desktops.
high
live
partial fix
since Oct 8, 2026updated Oct 22, 2026, 12:04 UTC
GhostAction returns: hijacked GitHub accounts shove secret-stealing 'security audit' workflows to 30k+ repos
› GitHub repositories / GitHub Actions (compromised maintainer accounts)
GhostAction, a run archetypal documented by GitGuardian in Sept 2025, came rear in 2026. It hit 772 repos in Aug-Sep 2026, afterward surged on Oct 8-12: concerning 1,900 compromised GitHub accounts pushed counterfeit 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets affirmative all credential established in the complete git former to 193.32.204.199 complete plain HTTP. GitHub began preventing the workflow from operating about Oct 9. The controller moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + counterfeit .woff2 font stealer established in 94 repos.
critical
live
partial fix
since Oct 7, 2026updated Oct 22, 2026, 16:56 UTC
[email protected] npm Shai-Hulud worm alongside hostage GitHub token
› tensorlake (npm)
On Oct 8 2026, [email protected] was published from the genuine GitHub repo (with npm provenance) carrying a preinstall hook that installs a Shai-Hulud-style credential-stealing worm. It harvests npm/GitHub/cloud/SSH/AI-tool secrets, spreads to another packages, and installs a “gh-token-monitor” that wipes the residence directory if the taken GitHub token is revoked. Pin 0.5.143; eliminate the detect before rotating tokens.
- Oct 4highCitrix NetScaler: Citrix NetScaler Improper Restriction of Operations inside the Bounds of a Memory Buffer Vulnerabilitypatched
› Citrix NetScaler patched
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) merge an improper limitation of operations inside the limits of a recollection buffer exposure that could authorize for a denial of service. Added to CISA KEV on 2026-10-04.
- Oct 2highZammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerabilitypatched
› Zammad GmbH Zammad patched
Zammad GmbH Zammad contains an improper privilege administration exposure that can authorize the local zammad person to escalate privileges to root. This exposure can be chained alongside CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 according to evidence of energetic exploitation.
CVE-2026-102490 · CVE-2026-102489
high
live
partial fix
since Oct 1, 2026updated Oct 22, 2026, 11:20 UTC
Ivanti Connect Secure zero-day sequence (CVE-2026-104935) exploited for root
› Ivanti Connect Secure (ICS)
Volexity observed danger performer UTA0576 chaining an Ivanti Connect Secure authentication-bypass / RCE zero-day (CVE-2026-104935) alongside additional flaws from concerning Oct 1–3 2026 to get unauthenticated base on completely patched appliances, re-exploiting in recollection without planting webshells. Ivanti patched CVE-2026-104935 on Oct 13; CISA added it to KEV. One privilege-escalation part of the sequence was motionless being fixed at disclosure.
critical
live
patched
since Sep 30, 2026updated Oct 22, 2026, 11:18 UTC
FortiMail unauthenticated file-write zero-day CVE-2026-104286
› Fortinet FortiMail
Fortinet FortiMail CVE-2026-104286 (CVSS 9.8) is an unauthenticated arbitrary document compose via way traversal / null-byte issues in Identity-Based Encryption web flows. CISA confirmed energetic exploitation and ordered national mitigation; Fortinet published FG-IR-26-175 alongside patches and interim mitigations (disable IBE / restrict admin/webmail).
September 2026 1
high
live
partial fix
since Sep 9, 2026updated Oct 22, 2026, 11:20 UTC
PingCAP / TiDB Cloud breach: taken service-account credentials, data and origin code taken
› PingCAP TiDB Cloud (hosted repository platform)
PingCAP confirmed that between Sep 9 and Oct 7 2026 an unauthorized gathering used taken service-account credentials to admission inner systems, copy data and get origin code. Exported records included TiDB Cloud person names/emails, org/project associations, SQL-editor text, billing/contract data and an encrypted API-key table. Extortion collection FulcrumSec claims 10.6 TB and 115k plaintext API keys; those figures are unverified and PingCAP disputes the API-key claim. No evidence data stored in TiDB was affected.
August 2026 1
critical
live
partial fix
since Aug 29, 2026updated Oct 22, 2026, 16:56 UTC
BeyondTrust Remote Support zero-day CVE-2026-102764 (ARMORY CASTLE)
› BeyondTrust Remote Support (formerly Bomgar)
China-nexus performer ARMORY CASTLE (ex-UNC5221) exploited CVE-2026-102764, a crucial unauthenticated file-operations flaw in BeyondTrust Remote Support, as a zero-day from delayed August 2026. BeyondTrust issued BT26-05-RS; SaaS was auto-patched by Oct 9; CISA added the CVE to KEV on Oct 16. Self-hosted appliances need the place affirmative forensics — patching solitary does not apparent existing footholds (SAWFLY / BARECLAW).
February 2025 1
critical
live
unpatched
since Feb 19, 2025updated Oct 22, 2026, 16:56 UTC
Fearless Wallet browser expansion leaked personal keys for ~20 months
› Fearless Wallet browser expansion (Chrome; Firefox build delisted)
The Polkadot Community Foundation warned that Fearless Wallet browser-extension versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 contained code, added Feb 19 2025 inner a ample 'TON ecosystem' change, that sent personal keys/recovery data to an attacker server whenever the wallet was unlocked. The code was energetic at distinct times until Oct 10 2026. Eight users have reported losses totalling 17,286 DOT. Anyone who used the expansion since Feb 2025 must create a new keypair in another wallet and move funds.
