Skip to content
October 15, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button

Weekly Recap

Weekly CVE report Oct 5-11 2026 exploited vulnerabilities not yet on CISA KEV
  • Weekly Recap

Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

Do Son October 12, 2026 0
Weekly CVE report on exploited vulnerabilities from Daily Cybersecurity and CISA KEV, September 28 to October 4, 2026
  • Weekly Recap

Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026)

Do Son October 5, 2026 0
Weekly CVE report comparing exploited vulnerabilities from Daily Cybersecurity intelligence with the CISA KEV catalog for September 21-27, 2026
  • Weekly Recap

Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

Do Son September 28, 2026 0
CVE-2023-50164 AEM Forms
  • Weekly Recap

Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs

Do Son September 21, 2026 0
Weekly CVE report chart comparing Daily Cybersecurity exploited vulnerabilities against the CISA KEV catalog
  • Weekly Recap

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

Do Son September 14, 2026 0

Tech News

Chrome VRP rewards update for Google Chrome memory corruption vulnerabilities
  • Technology

Google Updates Chrome VRP Rewards for Memory Flaws

Do Son October 15, 2026 0
npm trusted publishing configuration tied to a GitHub repository name, exposed to a repository name reuse attack before its first publish
  • Technology

npm Trusted Publishing Now Expires After 48 Hours

Do Son October 15, 2026 0
Google Play AI apps publishing interface and Gemini app creation tools
  • Technology

Google Play AI Apps Revolutionize Android Publishing

Do Son October 14, 2026 0
Google Gemini 4 Argon AI model architecture and Antigravity coding platform
  • Technology

Google Gemini 4 Argon Model Officially Launches

Do Son October 14, 2026 0

Vulnerability

cURL CVE-2026-92392 vulnerability diagram illustrating HTTP/2 use-after-free flaw
  • Vulnerability Report

cURL Releases Version 8.23.0 to Fix Critical Flaw

Do Son October 15, 2026 0
Next.js security update fixes unauthenticated remote code execution flaws
  • Vulnerability Report

Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update

Do Son October 15, 2026 0
Citrix security update fixes XenServer and UniconOS privilege escalation vulnerabilities
  • Vulnerability Report

Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws

Do Son October 15, 2026 0
SiteGuard Server Edition vulnerability CVE-2026-106931 exploited in the wild for OS command injection
  • Vulnerability Report

SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access

Do Son October 15, 2026 0

Cyber Security

Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man Splash page displayed on seized domains from the CoGUI phishing kit and CoGUI phishing kit takedown
  • Cybercriminals

Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man

October 15, 2026 0
Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests West Africa scam centers targeted in a global scam crackdown by Meta, tech companies and law enforcement
  • Cybercriminals

Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests

October 14, 2026 0
DOJ Charges Engineer After OpenAI Recording Device Arrest Federal evidence photo of an OpenAI recording device following the OpenAI recording device arrest
  • Cybercriminals

DOJ Charges Engineer After OpenAI Recording Device Arrest

October 14, 2026 0
DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies FBI agents seize laptops from DPRK IT worker and DPRK IT worker laptop farms in Texas
  • Cybercriminals

DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies

October 14, 2026 0

Malware Alert

Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer WatchGuard VPN phishing and WatchGuard VPN phishing site attack flow diagram
  • Malware

Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer

October 15, 2026 0
CodeAudit AI VS Code Extension Captures Developer Source Code in the Background CodeAudit AI extension and VS Code CodeAudit AIextension activity flow diagram
  • Malware

CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

October 15, 2026 0
CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach PEERSTITCH malware and FortiOS PEERSTITCH malware memory injection diagram
  • Malware

CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach

October 15, 2026 0
Ledger Supply Chain Attack Hits Europe via Tampered Wallets Ledger Nano X hardware wallet dismantled showing malicious LTE module modification
  • Malware

Ledger Supply Chain Attack Hits Europe via Tampered Wallets

October 13, 2026 0

Data Leak

Ricardo Data Leak Exposes User Contact Details Ricardo data leak illustration highlighting the SMG security vulnerability.
  • Data Leak

Ricardo Data Leak Exposes User Contact Details

October 9, 2026 0
The Growing Backlash Against Apple Intelligence Integration Apple Intelligence storage macOS 27 Golden Gate enterprise security
  • Data Leak

The Growing Backlash Against Apple Intelligence Integration

October 9, 2026 0
Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak leak
  • Data Leak

Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak

October 6, 2026 0
Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People Denmark CPR data breach - CPR numbers exposed for 8.8 million people in the national register
  • Data Leak

Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People

October 5, 2026 0
Windows 11 Wi-Fi Authentication Broken by KB5127648 Windows 11 Wi-Fi authentication failure and enterprise 802.1X connection error
  • Windows

Windows 11 Wi-Fi Authentication Broken by KB5127648

Do Son October 15, 2026 0
Microsoft recently deployed the cumulative security update KB5127648 for Windows 11. However, newly released cumulative patches often...
Read More Read more about Windows 11 Wi-Fi Authentication Broken by KB5127648
Claude Code Linux Kernel Patch Triples Read Speeds Claude Code Linux kernel memory management optimization and Linus Torvalds benchmark results
  • Linux

Claude Code Linux Kernel Patch Triples Read Speeds

Do Son October 15, 2026 0
Linus Torvalds recently tasked the artificial intelligence tool Claude Code with authoring modifications for a vital Linux...
Read More Read more about Claude Code Linux Kernel Patch Triples Read Speeds
Windows 11 Mouse Stutter Fixed in KB5127648 Update Windows 11 mouse stutter fix in KB5127648 gaming update
  • Windows

Windows 11 Mouse Stutter Fixed in KB5127648 Update

Do Son October 15, 2026 0
In the recently deployed Windows 11 KB5127648 update, Microsoft resolved an issue causing mouse input lag during...
Read More Read more about Windows 11 Mouse Stutter Fixed in KB5127648 Update
Epic Games Launcher Update Sparks Vibe Coding Backlash Epic Games Launcher update interface and Linux support comparison
  • Linux

Epic Games Launcher Update Sparks Vibe Coding Backlash

Do Son October 15, 2026 0
For years, global PC gamers criticized the Epic Games Store desktop launcher as bloated, sluggish, and resource-heavy....
Read More Read more about Epic Games Launcher Update Sparks Vibe Coding Backlash
Windows Blocks ReFS Removable Storage Starting in 2027 ReFS removable storage mounting block policy in Windows 11 and Windows Server
  • Windows

Windows Blocks ReFS Removable Storage Starting in 2027

Do Son October 15, 2026 0
The Resilient File System (ReFS) has continually received feature enhancements across Windows 11 and Windows Server in...
Read More Read more about Windows Blocks ReFS Removable Storage Starting in 2027
Android Scam Protection Gets Gemini AI Upgrades Android scam protection warning in Google Messages powered by Gemini scam detection, flagging a suspicious wrong-number text
  • Android

Android Scam Protection Gets Gemini AI Upgrades

Do Son October 15, 2026 0
Google Takes On Tailored Scams With Gemini Telecom fraud and social engineering attacks are spreading worldwide, and...
Read More Read more about Android Scam Protection Gets Gemini AI Upgrades
Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms Junos OS vulnerabilities overview showing Juniper security bulletin fixes for CVE-2026-102182, CVE-2026-101954, and CVE-2026-33792
  • Vulnerability Report

Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms

Do Son October 15, 2026 0
TL;DR Juniper Networks published its October 2026 security bulletins on October 14, 2026, resolving dozens of critical...
Read More Read more about Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms
Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities Dell Wyse Management Suite security update DSA-2026-405 fixing CVE-2026-82158, CVE-2026-82159, and CVE-2026-82161
  • Vulnerability Report

Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities

Do Son October 15, 2026 0
TL;DR Dell Technologies released security advisory DSA-2026-405 to address four cross-site scripting (XSS) flaws in Dell Wyse...
Read More Read more about Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities
NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities NSD stack overwrite vulnerability diagram showing CVE-2026-101341, CVE-2026-101339, and CVE-2026-101338 impact
  • Vulnerability Report

NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities

Do Son October 15, 2026 0
TL;DR NLnet Labs released NSD version 4.15.3 on October 14, 2026, to fix four high-severity flaws. Each...
Read More Read more about NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities
SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws SonicWall NSM On-Prem vulnerabilities CVE-2026-96540 and CVE-2026-100232 security advisory
  • Vulnerability Report

SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws

Do Son October 15, 2026 0
TL;DR SonicWall released security updates to fix two high-severity flaws in SonicWall NSM On-Prem deployments. Tracked as...
Read More Read more about SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws
CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse DataElement Bisheng vulnerabilities CVE-2026-96679 CVE-2026-96681 CVE-2026-100156 CERT/CC advisory
  • Vulnerability Report

CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse

Do Son October 15, 2026 0
TL;DR CERT/CC and security researcher Louis Sanchez of Voke Cyber disclosed three high-risk Bisheng vulnerabilities affecting the...
Read More Read more about CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse
Critical Cisco Secure Email Gateway Vulnerability CVE-2026-76519 Actively Exploited in the Wild Cisco Secure Email Gateway vulnerability CVE-2026-76519 exploited in the wild
  • Vulnerability Report

Critical Cisco Secure Email Gateway Vulnerability CVE-2026-76519 Actively Exploited in the Wild

Do Son October 14, 2026 0
TL;DR Cisco disclosed CVE-2026-76519, a critical arbitrary file write flaw in the Cisco Secure Email Gateway. Attackers...
Read More Read more about Critical Cisco Secure Email Gateway Vulnerability CVE-2026-76519 Actively Exploited in the Wild
Palo Alto PAN-OS RCE Vulnerability CVE-2026-0322 Actively Exploited in the Wild Palo Alto PAN-OS RCE vulnerability CVE-2026-0322 exploited in the wild
  • Vulnerability Report

Palo Alto PAN-OS RCE Vulnerability CVE-2026-0322 Actively Exploited in the Wild

Do Son October 14, 2026 0
TL;DR Palo Alto Networks disclosed CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE flaw in the firewall management...
Read More Read more about Palo Alto PAN-OS RCE Vulnerability CVE-2026-0322 Actively Exploited in the Wild
F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution F5 NGINX vulnerabilities CVE-2026-97205 CVE-2026-93479 CVE-2026-15176 security advisory
  • Vulnerability Report

F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution

Do Son October 14, 2026 0
TL;DR F5 published three security advisories on October 14, 2026, addressing high-risk NGINX vulnerabilities in NGINX Plus...
Read More Read more about F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution
EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data EC-CUBE AmazonPay Plugin vulnerability CVE-2026-103671 exploited in the wild
  • Vulnerability Report

EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data

Do Son October 14, 2026 0
TL;DR JPCERT/CC, IPA, and EC-CUBE CO.,LTD. warned that threat actors are actively exploiting CVE-2026-103671 in the wild....
Read More Read more about EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data
Windows 11 KB5127648 Update Resolves Critical System Bugs Windows 11 KB5127648 update interface showing security patch and bug fixes
  • Windows

Windows 11 KB5127648 Update Resolves Critical System Bugs

Do Son October 14, 2026 0
Microsoft recently deployed the monthly cumulative update KB5127648 for Windows 11 versions 24H2, 25H2, and 26H2. Primarily,...
Read More Read more about Windows 11 KB5127648 Update Resolves Critical System Bugs
Windows 11 24H2 EOL Reached for Consumer Editions Windows 11 24H2 EOL announcement for Home and Pro consumer editions
  • Windows

Windows 11 24H2 EOL Reached for Consumer Editions

Do Son October 14, 2026 0
Microsoft has officially terminated the lifecycle support for consumer editions of Windows 11 version 24H2, effective October...
Read More Read more about Windows 11 24H2 EOL Reached for Consumer Editions
Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts GitLab RCE vulnerability CVE-2026-97229 proof-of-concept exploit disclosed
  • Vulnerability Report

Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts

Do Son October 14, 2026 0
TL;DR GitLab patched CVE-2026-97229, a maximum-severity (CVSS 10.0) integer overflow flaw in its CI/CD regular expression compiler....
Read More Read more about Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
Codex CLI Daemon Autostart Sparks Developer Backlash Codex CLI daemon autostart terminal interface
  • Technology

Codex CLI Daemon Autostart Sparks Developer Backlash

Do Son October 14, 2026 0
Starting with the Codex CLI 0.157.0 update, the development team introduced an automatic background server startup feature....
Read More Read more about Codex CLI Daemon Autostart Sparks Developer Backlash
Excel Copilot AI Gains Interactive Canvas Feature Excel Copilot interactive canvas and data cleaning interface
  • Technology

Excel Copilot AI Gains Interactive Canvas Feature

Do Son October 14, 2026 0
According to a recent Microsoft announcement, developers are adding an interactive canvas to Excel Copilot AI. This...
Read More Read more about Excel Copilot AI Gains Interactive Canvas Feature
Broadcom Announces VMware Monthly Security Updates VMware monthly security updates and HyperArmor architecture
  • Technology

Broadcom Announces VMware Monthly Security Updates

Do Son October 14, 2026 0
Broadcom recently announced a transition to a monthly software security update schedule for its flagship virtualization product,...
Read More Read more about Broadcom Announces VMware Monthly Security Updates
Binance Pool Shutdown Set for November 10, 2026 Binance Pool shutdown notice for bitcoin miners, who must switch to another Binance mining pool alternative before November 10
  • Technology

Binance Pool Shutdown Set for November 10, 2026

Do Son October 14, 2026 0
Binance Will Close Its Mining Pool Crypto exchange Binance has announced that it will shut down Binance...
Read More Read more about Binance Pool Shutdown Set for November 10, 2026
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-105133CVSS 6.9
    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
    CISA KEV📅 Added to KEV: Oct 14, 2026
  • CVE-2026-105134CVSS 10.0
    A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the...
    CISA KEV📅 Added to KEV: Oct 14, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-84249CVSS 9.8
    IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due...
    📅 Updated: Oct 15, 2026
  • CVE-2026-109758CVSS 9.3
    Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized...
    📅 Updated: Oct 15, 2026
  • CVE-2026-110812CVSS 9.4
    Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an...
    📅 Updated: Oct 15, 2026
  • CVE-2026-87744CVSS 9.1
    A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls...
    📅 Updated: Oct 15, 2026
  • CVE-2026-9191CVSS 9.6
    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code...
    📅 Updated: Oct 15, 2026
  • CVE-2026-70242CVSS 9.8
    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-55684CVSS 9.8
    WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST...
    📅 Updated: Oct 15, 2026
  • CVE-2026-55683CVSS 9.8
    WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input...
    📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.