Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Moxa Warns of Three Flaws in MRC Client and End-of-Life OnCell G3150A-LTE Gateway Moxa vulnerabilities in MRC Client and OnCell G3150A-LTE gateway
  • Vulnerability Report

Moxa Warns of Three Flaws in MRC Client and End-of-Life OnCell G3150A-LTE Gateway

Do Son October 28, 2026 0

Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.

Public PoC Exploit Disclosed for Critical libheif RCE Vulnerabilities libheif vulnerabilities diagram showing PoC exploit chain for GHSA-x8r2-mggj-j6wr and GHSA-2jg2-4ch7-h545
  • Vulnerability Report

Public PoC Exploit Disclosed for Critical libheif RCE Vulnerabilities

Do Son October 28, 2026 0

Details and PoC exploit code are out for critical libheif vulnerabilities GHSA-x8r2-mggj-j6wr and GHSA-2jg2-4ch7-h545. Upgrade to 1.23.3 now.

WatchGuard Patches 18 Fireware OS Vulnerabilities, Seven Rated Critical WatchGuard Fireware OS vulnerabilities patched on Firebox firewall, including critical CVE-2026-103594
  • Vulnerability Report

WatchGuard Patches 18 Fireware OS Vulnerabilities, Seven Rated Critical

Do Son October 28, 2026 0

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

Microsoft Authenticator AuthMask Flaw Leaks Tokens Microsoft Authenticator AuthMask flaw diagram showing token theft and application spoofing
  • Vulnerability Report

Microsoft Authenticator AuthMask Flaw Leaks Tokens

Do Son October 28, 2026 0

The Microsoft Authenticator AuthMask flaw allowed rogue Android apps to impersonate trusted software and hijack enterprise tokens and passkeys.

NVIDIA NeMo Agent Toolkit Vulnerability CVE-2026-65145 Scores CVSS 10.0 NeMo Agent Toolkit vulnerability CVE-2026-65145 CVSS 10.0 fixed in NVIDIA security update
  • Vulnerability Report

NVIDIA NeMo Agent Toolkit Vulnerability CVE-2026-65145 Scores CVSS 10.0

Do Son October 28, 2026 0

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

CISA Adds Adobe Magento and Google Brotli Flaws to KEV Catalog CISA KEV catalog adds Adobe Magento CVE-2026-48356 and Google Brotli vulnerability CVE-2026-111497
  • Vulnerability Report

CISA Adds Adobe Magento and Google Brotli Flaws to KEV Catalog

Do Son October 27, 2026 0

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

Veeam Patches Five Critical and High Vulnerabilities in Backup & Replication and Veeam ONE Veeam vulnerabilities diagram showing Veeam Backup & Replication fixes for CVE-2026-108142, CVE-2026-107671, and CVE-2026-105477
  • Vulnerability Report

Veeam Patches Five Critical and High Vulnerabilities in Backup & Replication and Veeam ONE

Do Son October 27, 2026 0

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

Selfyz AI Review: Fast New-Model Support, Ready-Made Templates, and One Pricing Catch ai
  • Technique

Selfyz AI Review: Fast New-Model Support, Ready-Made Templates, and One Pricing Catch

Do Son October 27, 2026 0
Quick verdict SelfyzAI is the AI creation platform I recommend when someone asks me for one account...
Read More Read more about Selfyz AI Review: Fast New-Model Support, Ready-Made Templates, and One Pricing Catch
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost sweet_1793131846l29TrRkjsZ
  • Press Release

Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost

cybernewswire October 27, 2026 0
New York, NY, 27th October 2026, CyberNewswire
Read More Read more about Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution YOOtheme Pro vulnerability CVE-2026-102785 exploited for remote code execution with webshells
  • Vulnerability Report

YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution

Do Son October 27, 2026 0

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

Claude Agent Alignment Failure Exposed in AISI Incident Claude agent alignment failure diagram showing Claude Mythos 5 cybersecurity evaluation breach
  • Technology

Claude Agent Alignment Failure Exposed in AISI Incident

Do Son October 27, 2026 0

UK AISI revealed a Claude agent alignment failure where the autonomous AI submitted malicious code to real GitHub projects during cybersecurity tests.

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts INTERPOL_1200x720_1792474169MWthkn6AkO
  • Press Release

Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts

cybernewswire October 27, 2026 0
Torrance, United States / California, 27th October 2026, CyberNewswire
Read More Read more about Criminal IP Joins INTERPOL’s Gateway Initiative to Support Global Cybercrime Efforts
Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence tech
  • Technique

Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence

Do Son October 27, 2026 0
Modern defense teams work with huge amounts of information, from satellite imagery and weather observations to mapping,...
Read More Read more about Free APIs for the Defense Sector: 7 Useful Options for Data and Intelligence
Microsoft Voluntary Buyout Program Targets 60,000 Staff Microsoft voluntary buyout program memo announcing severance options for eligible personnel
  • Technology

Microsoft Voluntary Buyout Program Targets 60,000 Staff

Do Son October 27, 2026 0

The Microsoft voluntary buyout program offers severance to 60,000 employees across four countries as the tech giant redirects capital toward AI computing.

Windows 11 CTL Update Refreshes Offline Certificates Windows 11 CTL update diagram showing offline certificate trust list deployment
  • Windows

Windows 11 CTL Update Refreshes Offline Certificates

Do Son October 27, 2026 0

Microsoft released a Windows 11 CTL update to refresh offline certificate trust lists and remove untrusted roots across air-gapped enterprise systems.

Denmark Ends Collabora Pilot in Blow to Open Source Denmark ends Collabora pilot evaluating open source alternatives to Microsoft Office
  • Technology

Denmark Ends Collabora Pilot in Blow to Open Source

Do Son October 27, 2026 0

Denmark ends Collabora pilot testing across its public sector after formatting errors disrupted case workflows, securing a quiet victory for Microsoft.

Apple iOS 27.2 Update Fixes 160 Security Flaws Apple iOS 27.2 update interface displaying Siri AI conversational memory and Find My integration
  • Vulnerability Report

Apple iOS 27.2 Update Fixes 160 Security Flaws

Do Son October 27, 2026 0

The Apple iOS 27.2 update enhances Siri conversational intelligence, integrates Siri Remote into Find My, and patches over 160 security vulnerabilities.

Windows 11 Universal Print Glitch Demands Manual Fix Windows 11 Universal Print error 0x80004005 troubleshooting diagram
  • Windows

Windows 11 Universal Print Glitch Demands Manual Fix

Do Son October 27, 2026 0

A persistent Windows 11 Universal Print bug breaks printer queues after OS upgrades, displaying error 0x80004005 and requiring queue reinstallation.

OffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLs OffiDocs Chrome extensions - spying Chrome extensions hex-encode and send full browsing URLs to remote servers
  • Data Leak

OffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLs

Do Son October 27, 2026 0

60 OffiDocs Chrome extensions with 2.3M installs secretly send browsing URLs. See how these spying Chrome extensions work and how to stay safe.

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft SiriusQT RAT and Windows SiriusQT RAT HVNC attack architecture diagram
  • Malware

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft

Do Son October 27, 2026 0

Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets.

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning Armorsteal malware and Python Armorsteal malware SEO poisoning infection chain diagram
  • Malware

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

Do Son October 27, 2026 0

Zscaler uncovers an SEO poisoning campaign using fake Chocolatey and Massgrave sites to drop Armorsteal malware and Python Armorsteal malware modules.

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface PHP2Shell added to CISA KEV catalog after confirmed RCE and suspected DPRK scanning
  • Vulnerability Report

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface

Do Son October 27, 2026 0

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-117691CVSS 9.1
    A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server...
    📅 Updated: Nov 7, 2026
  • CVE-2026-120984CVSS 9.1
    A flaw was found in the Keycloak server's client management component. When a client is created or imported...
    📅 Updated: Nov 7, 2026
  • CVE-2026-123966CVSS 10.0
    A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119075CVSS 9.8
    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list...
    📅 Updated: Nov 7, 2026
  • CVE-2026-118066CVSS 9.1
    The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...
    📅 Updated: Nov 7, 2026
  • CVE-2026-104014CVSS 9.8
    The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up...
    📅 Updated: Nov 7, 2026
  • CVE-2023-3961CVSS 9.1
    A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.