Skip to content
October 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution F5 NGINX vulnerabilities CVE-2026-97205 CVE-2026-93479 CVE-2026-15176 security advisory
  • Vulnerability Report

F5 Patches Three NGINX Vulnerabilities Allowing Memory Corruption and Remote Code Execution

Do Son October 14, 2026 0

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data EC-CUBE AmazonPay Plugin vulnerability CVE-2026-103671 exploited in the wild
  • Vulnerability Report

EC-CUBE AmazonPay Plugin Vulnerability CVE-2026-103671 Actively Exploited in the Wild to Steal Account Data

Do Son October 14, 2026 0

Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.

Windows 11 KB5127648 Update Resolves Critical System Bugs Windows 11 KB5127648 update interface showing security patch and bug fixes
  • Windows

Windows 11 KB5127648 Update Resolves Critical System Bugs

Do Son October 14, 2026 0

Download the Windows 11 KB5127648 update for versions 24H2, 25H2, and 26H2. This patch fixes AC-3 audio crashes, login black screens, and security flaws.

Google Play AI Apps Revolutionize Android Publishing Google Play AI apps publishing interface and Gemini app creation tools
  • Technology

Google Play AI Apps Revolutionize Android Publishing

Do Son October 14, 2026 0

Users can now publish Google Play AI apps using a standard account. Discover how Google AI Studio and Gemini are transforming Android app development.

Windows 11 24H2 EOL Reached for Consumer Editions Windows 11 24H2 EOL announcement for Home and Pro consumer editions
  • Windows

Windows 11 24H2 EOL Reached for Consumer Editions

Do Son October 14, 2026 0

Microsoft officially announces Windows 11 24H2 EOL for Home and Pro editions. Learn why you must upgrade to 25H2 or 26H2 to maintain critical security.

Google Gemini 4 Argon Model Officially Launches Google Gemini 4 Argon AI model architecture and Antigravity coding platform
  • Technology

Google Gemini 4 Argon Model Officially Launches

Do Son October 14, 2026 0

Discover Google Gemini 4 Argon. Learn how this new AI model matches GPT-6 Astra in performance while offering lower API costs and Antigravity integration.

Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts GitLab RCE vulnerability CVE-2026-97229 proof-of-concept exploit disclosed
  • Vulnerability Report

Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts

Do Son October 14, 2026 0

Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.

Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests West Africa scam centers targeted in a global scam crackdown by Meta, tech companies and law enforcement
  • Cybercriminals

Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests

Do Son October 14, 2026 0

A scam crackdown on West Africa scam centers by Meta, tech firms and police removed 3.7M accounts, led to 28 arrests and freed 117 victims.

Codex CLI Daemon Autostart Sparks Developer Backlash Codex CLI daemon autostart terminal interface
  • Technology

Codex CLI Daemon Autostart Sparks Developer Backlash

Do Son October 14, 2026 0

Discover why the new Codex CLI daemon autostart feature is causing frustration among developers. Learn how this background process impacts system updates.

Excel Copilot AI Gains Interactive Canvas Feature Excel Copilot interactive canvas and data cleaning interface
  • Technology

Excel Copilot AI Gains Interactive Canvas Feature

Do Son October 14, 2026 0

Discover the new Excel Copilot interactive canvas. Microsoft brings natural language reports, skill building, and advanced data cleaning to Microsoft 365.

Broadcom Announces VMware Monthly Security Updates VMware monthly security updates and HyperArmor architecture
  • Technology

Broadcom Announces VMware Monthly Security Updates

Do Son October 14, 2026 0

Broadcom introduces VMware monthly security updates to quickly patch flaws discovered by AI. Discover the new HyperArmor add-on for advanced virtual patching.

Binance Pool Shutdown Set for November 10, 2026 Binance Pool shutdown notice for bitcoin miners, who must switch to another Binance mining pool alternative before November 10
  • Technology

Binance Pool Shutdown Set for November 10, 2026

Do Son October 14, 2026 0

The Binance Pool shutdown arrives November 10, ending cloud mining and transaction acceleration. See what miners must do before then.

Mozilla Launches Firefox Enterprise Edition for Businesses Firefox Enterprise edition management console dashboard and security features
  • Technology

Mozilla Launches Firefox Enterprise Edition for Businesses

Do Son October 14, 2026 0

Discover the new Firefox Enterprise edition. Mozilla introduces a powerful management console to enhance corporate security, governance, and AI control.

Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells Nextcloud Collabora Online RCE vulnerability CVE-2026-110447 exploited in the wild
  • Vulnerability Report

Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells

Do Son October 14, 2026 0

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost) Linux vhost vulnerability Vghost CVE-2026-74580 proof-of-concept exploit disclosed
  • Vulnerability Report

Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

Do Son October 14, 2026 0

Technical details and PoC exploit code for CVE-2026-74580 (Vghost), an 8.8-severity Linux vhost vulnerability allowing root LPE and VM escape, are out.

CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent Komodo Periphery vulnerability CVE-2026-110005 OS command injection advisory
  • Vulnerability Report

CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent

Do Son October 14, 2026 0

Patch CVE-2026-110005 (CVSS 9.9), a critical Komodo Periphery vulnerability allowing authenticated users to run arbitrary OS commands as root on the host.

DOJ Charges Engineer After OpenAI Recording Device Arrest Federal evidence photo of an OpenAI recording device following the OpenAI recording device arrest
  • Cybercriminals

DOJ Charges Engineer After OpenAI Recording Device Arrest

Do Son October 14, 2026 0

DOJ officials announced an OpenAI recording device arrest after an engineer allegedly hid bugs in executive rooms. Read the case details.

IBM Releases Fixes for Four IBM WebSphere Liberty Security Bypass and DoS Vulnerabilities IBM WebSphere Liberty vulnerabilities CVE-2026-93895 and CVE-2026-93909 security advisory
  • Vulnerability Report

IBM Releases Fixes for Four IBM WebSphere Liberty Security Bypass and DoS Vulnerabilities

Do Son October 14, 2026 0

Patch four IBM WebSphere Liberty vulnerabilities, including critical 9.1-rated CVE-2026-93895 and CVE-2026-93909 authentication and access bypass flaws.

DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies FBI agents seize laptops from DPRK IT worker and DPRK IT worker laptop farms in Texas
  • Cybercriminals

DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies

Do Son October 14, 2026 0

The DOJ and FBI raided DPRK IT worker laptop farms in Texas, seizing 187 devices and charging 14 suspects in a $3M fraud scheme hitting 70+ US firms.

Public Proof-of-Concept Disclosed for CVE-2026-103572 Remote Code Execution in Visual Studio Copilot and SSMS Visual Studio Copilot RCE vulnerability CVE-2026-103572 path validation bypass
  • Vulnerability Report

Public Proof-of-Concept Disclosed for CVE-2026-103572 Remote Code Execution in Visual Studio Copilot and SSMS

Do Son October 14, 2026 0

PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.

Microsoft October 2026 Patch Tuesday Fixes Over 1,400 Flaws and One Exploited Zero-Day October 2026 Patch Tuesday zero-day vulnerabilities in Windows Shell and .NET Framework
  • Vulnerability Report

Microsoft October 2026 Patch Tuesday Fixes Over 1,400 Flaws and One Exploited Zero-Day

Do Son October 14, 2026 0

The October 2026 Patch Tuesday fixes 1,414 flaws and three zero-day vulnerabilities, including an exploited Windows Shell bypass. Patch now.

SuiteCRM Patches Eight Vulnerabilities, Including Critical Remote Code Execution Flaw SuiteCRM vulnerabilities enabling remote code execution, SQL injection and privilege escalation
  • Vulnerability Report

SuiteCRM Patches Eight Vulnerabilities, Including Critical Remote Code Execution Flaw

Do Son October 14, 2026 0

Eight SuiteCRM vulnerabilities, including a CVSS 9.4 remote code execution flaw and SQL injection bugs, are fixed. Upgrade to 8.10.2 or 7.15.2 now.

❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-83748CVSS 9.8
    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 29, 2026
  • CVE-2026-90531CVSS 9.6
    Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could...
    📅 Updated: Oct 29, 2026
  • CVE-2026-103093CVSS 9.4
    ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability...
    📅 Updated: Oct 29, 2026
  • CVE-2026-112380CVSS 9.0
    Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a...
    📅 Updated: Oct 29, 2026
  • CVE-2026-83910CVSS 9.8
    Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 29, 2026
  • CVE-2026-97406CVSS 9.1
    XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint,...
    📅 Updated: Oct 29, 2026
  • CVE-2026-91230CVSS 9.3
    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are...
    📅 Updated: Oct 29, 2026
  • CVE-2026-91231CVSS 10.0
    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
    📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.