Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
651 matching stories — incident — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing \$(...) runs as commands in the use
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSH_ENCODING. Under a legacy multibyte codec
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer than
A critical BeyondTrust Remote Support zero-day has been exploited since August 2026, and automated triage closed real alerts about it. Here's what partners need to do.
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.
Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens software. Tracked as CVE-2026-110936 and rated 8.4 under CVSS v4.0, the flaw stems from an uncontrolled DLL search path and can lead to arbitrary code execution with the privileges […] The post CVE-2026-110936: Siemens Software Center Flaw Exploited in ClickFix Attacks appeared first on SOC Prim
Two critical PHP core RCEs leaked before embargo. PHP moves its release to 21 Oct. Affected versions, severity, and what to do now.
Go 1.27.3 and 1.26.10 hard-block eight eMudhra intermediate CA keys. Check the SPKI hashes, impact, and upgrade guidance.
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunnelling capabilities, performed targeted reconnaissance of DNS, LDAP/Active Direc
OverviewOn October 15, 2026, BeyondTrust disclosed a critical authentication bypass in Remote Support (RS), its platform for remotely troubleshooting and administering endpoints. Tracked as CVE-2026-102764 and assigned a CVSSv4 score of 9.3, the vulnerability allows unauthenticated remote attackers to perform file operations on an affected appliance without user interaction. Versions 26.2.3 and earlier are affected unless the BT26-05-RS patch has been applied.BeyondTrust has confirmed that explo
Drupal has patched two critical remote code execution (RCE) vulnerabilities affecting Drupal core and the contributed Entity List module. The first flaw, tracked CVE-2026-108097, affects the core Field UI module, while CVE-2026-108099 affects Entity List. Neither is directly exploitable through the affected component alone, but Drupal warns that multiple serious exploit paths exist through contributed […]
CVE-2026-102764 (CVSS 9,3, EPSS ≥ 67. Perzentil) ist eine kritische Schwachstelle zur Umgehung der Authentifizierung in BeyondTrust Remote Support (RS). Die Schwachstelle beruht auf einer unzureichenden Origin Validation in einer internen Messaging-Komponente, und ihre Ausnutzung ermöglicht es nicht authentifizierten Angreifenden, aus der Ferne Dateioperationen auf einer betroffenen Appliance auszuführen. Die CVE wurde am 15. Oktober […]
OpenAI's own models caused the Hugging Face breach. Marketing or not, the tradecraft was real: what the first agent-run intrusion means for your SOC team.
Learn how to create a security incident log that supports GDPR records, ICO decisions, insurance claims, and credential access reviews.
The Arbitrary File Upload in BeyondTrust Remote Support let an attacker upload files to the appliance before BeyondTrust's October 15, 2026 fix. This FAQ is updated as new details emerge.
BeyondTrust has disclosed CVE-2026-102764, a critical Remote Support vulnerability exploited as a zero-day weeks before customers received a patch. The attack began on August 29, 2026, when one BeyondTrust-hosted Remote Support instance and one self-hosted appliance were compromised. BeyondTrust detected the hosted incident during proactive hunting on September 28, reproduced the entry vector that day, […]
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS score of 10.0 and described possible code execution by an unauthenticated user.The advisory states that CVE-2026-97229 affects GitLab CE and EE from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. GitLab says all deployment types are affected unles
CVE-2026-102764 is an Arbitrary File Upload vulnerability in BeyondTrust Remote Support that allows an external, unauthenticated attacker to perform arbitrary file operations by issuing specially crafted requests. Apply BeyondTrust's security patches, and check appliances for signs of compromise.
BeyondTrust has disclosed CVE-2026-102764, a critical vulnerability in Remote Support (RS) that was exploited as a zero-day by a suspected China-nexus cyber espionage actor. The flaw carries a CVSS 4.0 score of 9.3 and can allow an unauthenticated remote attacker to perform arbitrary file operations on a vulnerable appliance. Google Threat Intelligence Group and Mandiant […] The post CVE-2026-102764: Critical BeyondTrust Remote Support Zero-Day Exploited by China-Linked Hackers appeared fi
A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux networking stack and can allow attacker-controlled code running inside a guest VM to disclose host memory, crash the host, and, under demonstrated lab conditions, achieve guest-to-host code […] The post CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape appeared f
CVE-2026-103768 betrifft das ELEX WordPress HelpDesk & Customer Ticketing System bis Version 3.3.7. Version 3.3.8 behebt die Schwachstelle. The post CVE-2026-103768: Upload-Schwachstelle im ELEX-HelpDesk-Plugin appeared first on LocateRisk.
CVE-2026-104935 is an actively exploited Ivanti Connect Secure authentication bypass that can enable remote code execution. Review the exploit chain, affected versions, fixed releases, indicators of compromise, and how NodeZero Rapid Response helps validate exposure and verify remediation.
Most incident write-ups start after the damage is done: a breach found weeks later and a timeline pieced together from whatever logs survived.. We watched this one from the first command, as an attacker exploited CVE-2025-55182 (React2Shell) in a Next.js application and had a running implant 36 seconds later. They exploited a vulnerable Next.js application, […] The post Hiding in node_modules: a CVE-2025-55182 implant that rewrites Next.js so the app relaunches it appeared first on Counter
Overview Recently, NSFOCUS CERT monitored that GitLab released a security update to fix the GitLab Remote Code Execution Vulnerability (CVE-2026-97229). Due to insufficient validation of regular expressions in GitLab’s CI/CD configuration, unauthenticated attackers can construct special regular expressions within the CI/CD configuration to trigger an integer overflow during compilation, thereby executing arbitrary code with the […] The post GitLab Remote Code Execution Vulnerability
Attackers are chaining CVE-2026-105133 and CVE-2026-105134 to bypass authentication and achieve remote code execution in AhsayCBS. Explore the technical findings, indicators of compromise, affected versions, hotfixes, and how NodeZero Rapid Response helps validate exposure.
Executive Summary A maximum-severity vulnerability (CVE-2026-97229, CVSS 10.0) was disclosed affecting GitLab Community Edition (CE) and Enterprise Edition (EE), allowing attackers to execute arbitrary code on GitLab servers via specially crafted regular expressions in CI/CD pipeline configurations. Due to the potential for full server compromise and downstream supply-chain impact, immediate patching is required. About CVE-2026-97229 […] The post Critical GitLab RCE Lets Unauthenticated At
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate
Microsoft has patched CVE-2026-96951, a high-severity Windows Shell security feature bypass vulnerability that is already being exploited in real-world attacks. The flaw carries a CVSS score of 8.8 and allows an unauthenticated attacker to evade Mark of the Web (MOTW) protections by convincing a victim to interact with a specially crafted file. The zero-day was […] The post CVE-2026-96951: Actively Exploited Windows Shell Zero-Day Bypasses Mark of the Web appeared first on SOC Prime.
CVE-2026-105445: Docker Hub PAT Reassignment Flaw Docker has disclosed CVE-2026-105445 , a critical privilege assignment flaw in Docker Hub that could allow an attacker to reuse a personal access token (PAT) after it was
GitLab has released emergency patches for CVE-2026-97229, a critical remote code execution vulnerability with a maximum CVSS score of 10.0. The implications extend well beyond a compromised server. The post Critical GitLab Vulnerability (CVE-2026-97229) Puts Software Supply Chains at Risk first appeared on Action1.
CVE-2026-21589 (CVSS 9,3, EPSS ≥ 78. Perzentil) ist eine Schwachstelle mit kritischem Schweregrad für beliebigen Dateizugriff [CWE-552], die Atlassian Jira Service Management Data Center, Jira Software Data Center, Confluence Data Center, Bitbucket Data Center, Bamboo Data Center, Crowd Data Center, Crucible und Fisheye betrifft. Alle ungepatchten Versionen der betroffenen Produkte sind anfällig. Die Dateizugriffsschwachstelle lässt […]
A template injection flaw in Adobe Commerce scores a maximum 10.0, letting an unauthenticated attacker execute arbitrary code on a public storefront with no user interaction required.
CVE-2026-87855 betrifft JTL-Connector for WooCommerce bis Version 2.4.3. Version 2.4.4 oder höher behebt die Schwachstelle. The post CVE-2026-87855: Sicherheitsupdate für JTL-Connector for WooCommerce appeared first on LocateRisk.
CVE-2026-70279 ist eine XSS-Spoofing-Schwachstelle in Microsoft Exchange Server. The post CVE-2026-70279: XSS-Spoofing in Microsoft Exchange Server appeared first on LocateRisk.
curl 8.23.0 fixes 24 vulnerabilities, led by a high-severity HTTP/2 upload use-after-free (CVE-2026-92392) affecting curl and libcurl 8.12.0 through 8.22.0, and drops SMB support.
Delaware House Bill 381, signed into law on Sept. 2, 2026, amends the state’s data breach notification statute and clarifies when organizations must notify the Delaware Attorney General after a computer security breach.
In the process of fuzzing MS-RPC and Distributed File System (DFS) APIs, we discovered a one-packet mechanism set to crash an entire Windows server, which the Microsoft Security Response Center (MSRC) later assigned as CVE-2026-70111. Corelight customers using the Corelight Feed, a custom ruleset within our Open Network Detection and Response (NDR) Platform that’s designed to swiftly detect and help respond to emerging threats, are already automatically covered with the latest detection for expl
69Critical1337Important0Moderate1LowMicrosoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild.Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low.This month’s update includes patches for 301 products and comp