Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
122 matching stories — incident, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunnelling capabilities, performed targeted reconnaissance of DNS, LDAP/Active Direc
OverviewOn October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS), its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3, the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. Versions 26.2.3 and earlier are affected unless the BT26-05-RS patch has been applied.BeyondTrust has confirmed that explo
CVE-2026-102764 (CVSS 9,3, EPSS ≥ 67. Perzentil) ist eine kritische Schwachstelle zur Umgehung der Authentifizierung in BeyondTrust Remote Support (RS). Die Schwachstelle beruht auf einer unzureichenden Origin Validation in einer internen Messaging-Komponente, und ihre Ausnutzung ermöglicht es nicht authentifizierten Angreifenden, aus der Ferne Dateioperationen auf einer betroffenen Appliance auszuführen. Die CVE wurde am 15. Oktober […]
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user.The advisory states that CVE-2026-97229 affects GitLab CE and EE from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. GitLab says all deployment types are affected unles
A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux networking stack and can allow attacker-controlled code running inside a guest VM to disclose host memory, crash the host, and, under demonstrated lab conditions, achieve guest-to-host code […] The post CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape appeared f
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate
CVE-2026-21589 (CVSS 9,3, EPSS ≥ 78. Perzentil) ist eine Schwachstelle mit kritischem Schweregrad für beliebigen Dateizugriff [CWE-552], die Atlassian Jira Service Management Data Center, Jira Software Data Center, Confluence Data Center, Bitbucket Data Center, Bamboo Data Center, Crowd Data Center, Crucible und Fisheye betrifft. Alle ungepatchten Versionen der betroffenen Produkte sind anfällig. Die Dateizugriffsschwachstelle lässt […]
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands.Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-da
OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While
GitLab has released emergency security updates addressing CVE-2026-97229, a maximum-severity remote code execution vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE). The flaw has a CVSS score of 10.0 and could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable GitLab server under certain conditions. The vulnerability resides in GitLab’s […] The post CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Ex
SAP revises CVE-2025-42938 in Note 3629325 version 13. Updated applicability, correction instructions and the S4CEXT manual step require reassessment. The post SAP Note 3629325: October XSS Revision (CVE-2025-42938) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-89117 is reflected XSS in SAP Enterprise Portal. The fix is in EP-ADMIN 7.50, with different patch levels from October's EP-RUNTIME fixes. The post SAP Note 3779985: Enterprise Portal Reflected XSS (CVE-2026-89117) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-89118 exposes restricted SAP Enterprise Portal information anonymously. EP-RUNTIME fixes and verification without an authenticated session. The post SAP Note 3789825: Enterprise Portal Information Disclosure (CVE-2026-89118) appeared first on RedRays - Your SAP Security Solution.
CVE-2026-104286 (CVSS 9,8, EPSS ≥ 82. Perzentil) ist eine kritische Path-Traversal-Schwachstelle [CWE-22] in Verbindung mit einer fehlerhaften Verarbeitung von NULL-Bytes [CWE-158] und betrifft Fortinet FortiMail. Eine Ausnutzung ist über HTTP/HTTPS-Anfragen an die Weboberfläche von FortiMail möglich. Die Schwachstelle wurde am 1. Oktober 2026 sowohl veröffentlicht als auch in die KEV-Liste der CISA aufgenommen. Eine erfolgreiche […]
CVE-2026-3854 exposed a critical trust-boundary failure in the GitHub Enterprise Server (GHES) push pipeline. A value supplied through a standard Git push option could be copied into internal, semicolon-delimited metadata and later interpreted as trusted configuration. For organizations that use GHES to host private source code, deployment credentials, and connections to internal development systems, the […] The post CVE-2026-3854: How Git Push Options Became an Internal Metadata Injection
CVE-2026-87902 is a critical WordPress Core RCE flaw, exploited within hours of patch. See affected versions, exploitation flow, and how to stay protected. The post WordPress CVE-2026-87902: Unauthenticated RCE Exploited Within Hours appeared first on Indusface.
Next.js CVE-2026-94545 (CVSS 9.5) enables RCE through next/og SVG image generation. Learn affected versions, the Satori root cause, and remediation steps The post Next.js CVE-2026-94545: Critical ImageResponse Vulnerability Enables RCE via SVG appeared first on Indusface.
AI code tools are meant to help staff move fast. But a new study shows how they can also move private data into public view. Glow Labs, the research arm of Glow, shared the study on Sept. 29. It calls the issue PixelLeak. The Register spoke with Glow CTO Omer Singer. It reported that the […] The post AI Coding Agents Expose Private Corporate Screenshots in Widespread GitHub Privacy Incident appeared first on PrivacySavvy.
ShinyHunters now bypasses WAF rules to exploit Oracle PeopleSoft CVE-2026-35273. See the new attack chain, detection steps, and AppTrana's protection. The post CVE-2026-35273: ShinyHunters Resumes Oracle PeopleSoft Exploitation with WAF Bypass appeared first on Indusface.
One request carrying an unverified email claim grants immediate access as the victim and permanently mutates account TL;DR What: OX Research found a way to use a legitimately signed login token to authenticate as another existing LiteLLM user, including an admin. LiteLLM is an open-source gateway used by companies to manage access to OpenAI, Anthropic, […] The post CVE-2026-93355: Account Takeover in LiteLLM appeared first on OX Security.
CVE-2026-75650, dubbed "StyleSmuggler," is a maximum-severity (CVSS 10.0) unauthenticated Remote Code Execution vulnerability in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. An attacker injects malicious PHP code through the template engine’s `styles` property—which bypasses all built-in security validation—causing it to be written to disk and later executed when Magento’s dependency-injection scanner processes a “Payment Transaction Failed” email template. No authentication, no
This is a Remote Code Execution (RCE) vulnerability found in FuelCMS. An attacker can execute arbitrary code by sending malicious PHP code via the `data` parameter of the `/fuel//preview?module=blocks&field=view` endpoint. Although the vulnerability was reported to the vendor, no patch has been released yet. AIWAAP plans to address this issue with the “2342 / Daylight Studio FuelCMS Remote Code Execution” pattern, which will be included in the September 2026 pattern update. Tags: CVE-2026-30
CVE-2026-85706 is a critical path traversal vulnerability (CWE-22) found in the widely used DevOps platforms GitLab Community Edition (CE) and Enterprise Edition (EE). Remote attackers can read arbitrary local files accessible to the GitLab server process by sending specially crafted HTTP(S) API requests without requiring authentication. This vulnerability stems from insufficient file path validation and missing authentication checks within the GitLab Repository Commits API. A successful attack
GitLab has released emergency security updates for a maximum-severity vulnerability in Community Edition (CE) and Enterprise Edition (EE) that allows unauthenticated attackers to read arbitrary files from vulnerable servers. Tracked as CVE-2026-85706 and rated 10.0 on the CVSS scale, the flaw resides in the repository commits API and results from improper path confinement combined with […] The post CVE-2026-85706: Critical GitLab Path Traversal Flaw Exploited in the Wild appeared first on
In this blog we’re breaking down each CVE separately, including the root cause, technical overview and patch details. Read our analysis of these 4 critical CVEs Netty CVE-2026-75595 Root Cause A TLS record begins with a 5-byte header, and the handshake message inside it begins with its own 4-byte header: one byte of handshake type, […] The post Technical Analysis: Netty CVE-2026-75595, Next.js CVE-2026-75604, GHSA-2xp9-vwfh-vxw4 & GitPython CVE-2026-78676 appeared first on OX Securit
Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329). Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control.
OX Research found and disclosed a critical vulnerability in DeepSeek Harness, DeepSeek’s open-source AI coding-agent harness, that allowed a sandboxed AI agent to disable its own confinement with a single shell command – on shipped defaults, with no network exposure and no credentials. Vulnerability Details CVE: CVE-2026-82533 CWE: CWE-807 Reliance on Untrusted Inputs in a […] The post CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox appear
Product Name: Package UpSnap Vulnerability:  Authenticated Remote Code Execution in UpSnap Vulnerable Version:<= 5.3.5 CVE: CVE-2026-49481 On 26/05/2026, a security researcher at Astra Security found a critical Remote Code Execution (RCE) vulnerability in UpSnap, a web-based wake-on-LAN(WoL).  The root cause is an OS Command Injection vulnerability(CWE-78) that exists in UpSnap’s device management functionality due to unsafe ... Read more
What Engineering Teams Can Learn from the Hugging Face Incident, and How Sonatype Can Help Developers Respond at AI-Speed. Hugging Face recently disclosed that part of its production infrastructure has been compromised by an autonomous AI agent system.
The UK AISI logged AI agents escaping their sandbox during a cyber evaluation. Here is what a real sandbox looks like, and which control stops each event.
Dynatrace Security Researchers discovered a zero-day vulnerability in Langflow that allows any authenticated user to read, modify, or delete flows belonging to other users. Disclosed as CVE-2026-34046, this is a high severity vulnerability with a CVSS score of 8.7, affecting versions up to and including 1.5.0. To remediate this vulnerability in your environment, we strongly encourage to upgrade to version 1.5.1 or later. The post CVE-2026-34046: Broken authorization in Langflow exposes user flow
Keycloak filters its main users list so a restricted admin sees nothing. The endpoint that lists a role's members skips that filter and hands the same account everyone's email and name. Escape research found it, reported it, and it's now tracked as CVE-2026-17059.
A brief summary of CVE-2026-47774, a high severity HTTP/2 memory exhaustion vulnerability in Envoy proxy that achieves a 5,700:1 amplification ratio through cookie header size bypass and HPACK compression abuse. Includes PoC details, patch analysis, and detection strategies.
A brief summary of CVE-2026-42530, a Use After Free vulnerability in NGINX's HTTP/3 QPACK encoder stream handling that enables unauthenticated denial of service and conditional remote code execution against servers running NGINX Open Source 1.31.0 and 1.31.1.
A short review of CVE-2026-42055, a high severity heap buffer overflow in NGINX's HTTP/2 proxy and gRPC modules that can cause worker process crashes and potential remote code execution under specific non-default configurations.
A pre-auth RCE in cPanel & WHM (CVE-2026-41940) gives attackers root on over a million internet-facing hosts. What it is, why it matters, and what to do.
