Skip to content
October 27, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button

Weekly Recap

Weekly CVE report Oct 19-25 2026 exploited vulnerabilities including PHP2Shell and FortiSIEM compared with CISA KEV
  • Weekly Recap

Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV

Do Son October 26, 2026 0
Weekly CVE report Oct 12-18 2026 exploited vulnerabilities compared with CISA KEV
  • Weekly Recap

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days

Do Son October 19, 2026 0
Weekly CVE report Oct 5-11 2026 exploited vulnerabilities not yet on CISA KEV
  • Weekly Recap

Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

Do Son October 12, 2026 0
Weekly CVE report on exploited vulnerabilities from Daily Cybersecurity and CISA KEV, September 28 to October 4, 2026
  • Weekly Recap

Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026)

Do Son October 5, 2026 0
Weekly CVE report comparing exploited vulnerabilities from Daily Cybersecurity intelligence with the CISA KEV catalog for September 21-27, 2026
  • Weekly Recap

Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

Do Son September 28, 2026 0

Tech News

Apple blocks eMudhra certificates across macOS and iOS security architecture diagram
  • Technology

Apple Blocks eMudhra Certificates Over Weak Key Flaw

Do Son October 27, 2026 0
Anthropic S-1 IPO filing documents outlining revenue trajectory and compute commitments
  • Technology

Anthropic S-1 IPO Filing Targets Historic $2T Valuation

Do Son October 26, 2026 0
Apple Presto return scanner inspecting sealed iPhone packaging and verifying internal components
  • Technology

Apple Presto Return Scanner Targets In-Box Fraud

Do Son October 26, 2026 0
Come Back to Firefox marketing campaign banner promoting open web privacy
  • Technology

Come Back to Firefox Campaign Champions Web Privacy

Do Son October 26, 2026 0

Vulnerability

PHP2Shell added to CISA KEV catalog after confirmed RCE and suspected DPRK scanning
  • Vulnerability Report

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface

Do Son October 27, 2026 0
CoreGraphics zero-day CVE-2026-86950 exploited in the wild fixed in iOS 18.7.11
  • Vulnerability Report

Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

Do Son October 27, 2026 0
HashiCorp consul-k8s vulnerability diagram showing authorization bypass for CVE-2026-110720
  • Vulnerability Report

HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)

Do Son October 27, 2026 0
OpenMage vulnerabilities including critical OAuth CSRF fixed in Magento LTS 20.19.0
  • Vulnerability Report

OpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRF

Do Son October 27, 2026 0

Cyber Security

Gheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal Secrets Workflow code used in the Gheist campaign and Gheist GitHub campaign targeting repository secrets
  • Cybercriminals

Gheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal Secrets

October 26, 2026 0
Exposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 Targets Attack graph inside the Cairn AI hacking tool and Cairn AI panels exposed online
  • Cybercriminals

Exposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 Targets

October 26, 2026 0
GMO Desktop Cloud Breach Exposes 26,000 FX Servers GMO Desktop Cloud breach diagram showing Active Directory lateral movement and compromised forex servers
  • Cybercriminals

GMO Desktop Cloud Breach Exposes 26,000 FX Servers

October 26, 2026 0
Suspected Chinese Operator Uses ARTEX AI Framework in Global Hacking Campaign ARTEX AI hacking and global ARTEX AI hacking architecture diagram
  • Cybercriminals

Suspected Chinese Operator Uses ARTEX AI Framework in Global Hacking Campaign

October 25, 2026 0

Malware Alert

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft SiriusQT RAT and Windows SiriusQT RAT HVNC attack architecture diagram
  • Malware

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft

October 27, 2026 0
Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning Armorsteal malware and Python Armorsteal malware SEO poisoning infection chain diagram
  • Malware

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

October 27, 2026 0
uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers uCreator Android spyware and YingGai uCreator Android spyware virtualization architecture diagram
  • Malware

uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers

October 26, 2026 0
Amazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupport Amazon ClickFix campaign using a fake CAPTCHA and the Windows finger command to deliver Lumma Stealer
  • Malware

Amazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupport

October 26, 2026 0

Data Leak

Keystone Wallet Data Breach Exposes Customer Orders Keystone wallet data breach diagram showing Shopify API order leak and physical wrench attack risks
  • Data Leak

Keystone Wallet Data Breach Exposes Customer Orders

October 26, 2026 0
PingCAP Data Breach Exposes TiDB Cloud Customer Records and Source Code PingCAP data breach illustration highlighting the TiDB Cloud security incident.
  • Data Leak

PingCAP Data Breach Exposes TiDB Cloud Customer Records and Source Code

October 26, 2026 0
Smart TV ACR Tracking Study Finds Failed Opt-Outs and 57 Million Exposed Viewing Records Smart TV ACR tracking - Northeastern study finds smart TV viewing data exposed and opt-outs failing on Samsung and Vizio
  • Data Leak

Smart TV ACR Tracking Study Finds Failed Opt-Outs and 57 Million Exposed Viewing Records

October 26, 2026 0
CAPCOM ID Data Breach Exposes 11.77 Million Records CAPCOM ID data breach notice showing 11.77 million exposed user records, a Capcom account breach affecting emails and login activity
  • Data Leak

CAPCOM ID Data Breach Exposes 11.77 Million Records

October 23, 2026 0
PHP2Shell: List of Affected Products PHP2Shell affected products list including PAN-OS, QNAP, Cisco and Citrix with fix status
  • Vulnerability Report

PHP2Shell: List of Affected Products

Do Son October 26, 2026 0
TL;DR PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, lets unauthenticated attackers run code on servers that use PHP....
Read More Read more about PHP2Shell: List of Affected Products
Intel APX Windows 11 Toggle Unlocks CPU Efficiency Intel APX Windows 11 toggle architecture showing 32 general purpose registers and instruction execution
  • Windows

Intel APX Windows 11 Toggle Unlocks CPU Efficiency

Do Son October 27, 2026 0
Microsoft recently unveiled an experimental toggle designed to unleash Intel Advanced Performance Extensions (APX) on Windows 11....
Read More Read more about Intel APX Windows 11 Toggle Unlocks CPU Efficiency
Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS PAN-OS Brotli vulnerability CVE-2026-111497 buffer overflow affects Palo Alto Networks firewalls
  • Vulnerability Report

Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS

Do Son October 27, 2026 0
TL;DR Palo Alto Networks confirmed on October 26, 2026, that CVE-2026-111497, a critical Brotli decoder flaw, affects...
Read More Read more about Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries Zimbra Collaboration Suite vulnerabilities diagram showing Rapid7 research on CVE-2026-10632, CVE-2026-50057, and CVE-2026-93640
  • Vulnerability Report

Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries

Do Son October 27, 2026 0
TL;DR Rapid7 researchers disclosed 17 security flaws in Zimbra Collaboration Suite (ZCS) that break authentication, mailbox isolation,...
Read More Read more about Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries
Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities Mautic vulnerabilities overview showing Mautic 7.2.2 fixes for CVE-2026-115188, CVE-2026-115189, and CVE-2026-115190
  • Vulnerability Report

Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities

Do Son October 27, 2026 0
TL;DR The Mautic project released security updates on October 26, 2026, to resolve multiple critical and high-severity...
Read More Read more about Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities
PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass macOS autofs vulnerability CVE-2026-84568 root code execution and Gatekeeper bypass PoC published
  • Vulnerability Report

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass

Do Son October 27, 2026 0
TL;DR Researcher Mr.Gedik has published a full write-up and proof-of-concept harness for CVE-2026-84568 and CVE-2026-84570, two macOS...
Read More Read more about PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass
Tailscale SSH Vulnerability Enables Root Escalation Tailscale SSH vulnerability diagram showing Unix socket forwarding and privilege escalation to root
  • Vulnerability Report

Tailscale SSH Vulnerability Enables Root Escalation

Do Son October 27, 2026 0
Cybersecurity researcher Erica Windisch recently disclosed critical vulnerabilities affecting Tailscale SSH implementations. Specifically, research published on the...
Read More Read more about Tailscale SSH Vulnerability Enables Root Escalation
Paying Attention to Details: How to Build Trust in a Competitive Digital World ma
  • Technique

Paying Attention to Details: How to Build Trust in a Competitive Digital World

Do Son October 26, 2026 0
For businesses, trust plays a crucial role everywhere. A customer visiting your website read your offer. They...
Read More Read more about Paying Attention to Details: How to Build Trust in a Competitive Digital World
Windows 11 Speed Test Gets Native Tool Integration Windows 11 speed test native dialog interface powered by Ookla Speedtest
  • Windows

Windows 11 Speed Test Gets Native Tool Integration

Do Son October 26, 2026 0
Microsoft previously introduced a dedicated network speed option inside the Windows 11 Quick Settings panel. However, early...
Read More Read more about Windows 11 Speed Test Gets Native Tool Integration
OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3 OpenSSL 4.1.0 release architecture showing Elbrus e2k support and DTLS 1.3 integration
  • Technology

OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3

Do Son October 26, 2026 0
The OpenSSL Project has officially launched its latest feature release. Specifically, the OpenSSL 4.1.0 release announcement marks...
Read More Read more about OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3
eMudhra Rogue Certificates Flood Certificate Transparency eMudhra rogue certificates forged for Google domains logged in Certificate Transparency
  • Technology

eMudhra Rogue Certificates Flood Certificate Transparency

Do Son October 26, 2026 0
Last week, a severe cryptographic failure at Indian certification authority eMudhra sparked industry-wide alarm. Specifically, eight intermediate...
Read More Read more about eMudhra Rogue Certificates Flood Certificate Transparency
Electrum Wallet Vulnerability Exploits RBF Fee Bumps Electrum wallet vulnerability diagram showing malicious server transaction replacement and RBF exploitation
  • Vulnerability Report

Electrum Wallet Vulnerability Exploits RBF Fee Bumps

Do Son October 26, 2026 0
The developers of the popular open-source Bitcoin client Electrum have issued an urgent advisory. Specifically, maintainers urge...
Read More Read more about Electrum Wallet Vulnerability Exploits RBF Fee Bumps
AV2 Video Codec Moves Toward Chrome and YouTube AV2 video codec from AOMedia, successor to AV1, entering browser and YouTube streaming tests with better compression and HDR support
  • Technology

AV2 Video Codec Moves Toward Chrome and YouTube

Do Son October 26, 2026 0
From Standard to Real-World Testing The Alliance for Open Media (AOMedia) says the AV2 video codec is...
Read More Read more about AV2 Video Codec Moves Toward Chrome and YouTube
eMudhra Certificate Authority Incident Sparks Rebuke eMudhra certificate authority incident investigation diagram and Google Mozilla trust review
  • Technology

eMudhra Certificate Authority Incident Sparks Rebuke

Do Son October 26, 2026 0
Indian digital trust provider eMudhra recently issued a controversial explanation regarding its delayed forensic disclosures. Surprisingly, company...
Read More Read more about eMudhra Certificate Authority Incident Sparks Rebuke
Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code Storybook dev server vulnerability CVE-2026-114125 allows code injection from malicious websites
  • Vulnerability Report

Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code

Do Son October 26, 2026 0
TL;DR Storybook has patched CVE-2026-114125, a CVSS 9.4 Storybook dev server vulnerability that lets a malicious website...
Read More Read more about Storybook Fixes CVSS 9.4 Dev Server Flaw That Lets Malicious Sites Inject Code
Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV Weekly CVE report Oct 19-25 2026 exploited vulnerabilities including PHP2Shell and FortiSIEM compared with CISA KEV
  • Weekly Recap

Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV

Do Son October 26, 2026 0
Between October 19 and 25, 2026, CVE Watchtower logged 4,222 new CVEs. This weekly CVE report tracks...
Read More Read more about Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV
Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws .NET security update fixes Brotli buffer overflow CVE-2026-111497 and Linux tarball flaw
  • Vulnerability Report

Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws

Do Son October 26, 2026 0
TL;DR Microsoft has released an out-of-band .NET security update for .NET 8, 9 and 10, plus .NET...
Read More Read more about Microsoft Ships Out-of-Band .NET Updates for Brotli Overflow and Linux Tarball Flaws
Document Foundation Revisits the OOXML Standard Fight OOXML standardization history: The Document Foundation accuses Microsoft of steering OOXML through ISO, while LibreOffice relies on ODF
  • Technology

Document Foundation Revisits the OOXML Standard Fight

Do Son October 26, 2026 0
An Old Quarrel Returns The Document Foundation, the developer behind the open-source office suite LibreOffice, has published...
Read More Read more about Document Foundation Revisits the OOXML Standard Fight
Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon Apache Camel vulnerabilities including XXE flaw CVE-2026-90885 fixed in Camel 4.23.0
  • Vulnerability Report

Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon

Do Son October 26, 2026 0
TL;DR The Apache Camel project disclosed eight Apache Camel vulnerabilities across components such as camel-saxon, camel-aws2-s3 and...
Read More Read more about Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon
Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws Ruby security update fixes Onigmo regex flaws behind GitLab CVEs
  • Vulnerability Report

Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws

Do Son October 26, 2026 0
TL;DR On October 23, 2026, the Ruby team shipped a Ruby security update in versions 4.0.9, 3.4.12...
Read More Read more about Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
HTTP2Shell Vulnerability Expands Node2Shell Risk HTTP2Shell vulnerability diagram illustrating Brotli decoder memory corruption and remote code execution
  • Vulnerability Report

HTTP2Shell Vulnerability Expands Node2Shell Risk

Do Son October 26, 2026 0
Cybersecurity firm Aikido Security recently published an urgent advisory regarding an expanding decompression flaw. Initially tracked as...
Read More Read more about HTTP2Shell Vulnerability Expands Node2Shell Risk
FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public FortiSIEM vulnerability CVE-2026-106173 exploited in the wild with public PoC exploit
  • Vulnerability Report

FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public

Do Son October 26, 2026 0
TL;DR Canada’s Cyber Centre updated its Fortinet advisory on October 23, 2026, to warn that CVE-2026-106173 “is...
Read More Read more about FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 27, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 27, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 27, 2026
  • CVE-2026-109619CVSS 9.2
    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
    CISA KEV📅 Added to KEV: Oct 26, 2026
  • CVE-2026-109618CVSS 9.2
    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request....
    CISA KEV📅 Added to KEV: Oct 26, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    Admin intel📅 Updated: Oct 25, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91323CVSS 9.8
    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected...
    📅 Updated: Oct 27, 2026
  • CVE-2026-87302CVSS 9.1
    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected...
    📅 Updated: Oct 27, 2026
  • CVE-2026-110063CVSS 10.0
    Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized...
    📅 Updated: Oct 27, 2026
  • CVE-2026-10757CVSS 9.8
    There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux...
    📅 Updated: Oct 27, 2026
  • CVE-2026-107656CVSS 9.8
    An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0...
    📅 Updated: Oct 27, 2026
  • CVE-2026-109391CVSS 9.2
    Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML...
    📅 Updated: Oct 27, 2026
  • CVE-2026-105223CVSS 9.1
    maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data,...
    📅 Updated: Oct 27, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 27, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.