Skip to content
October 31, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability Diagram of critical Chef Automate vulnerability and Chef Automate vulnerability patch
  • Vulnerability Report

CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability

Do Son September 12, 2026 0

Progress patched a critical Chef Automate vulnerability tracked as CVE-2026-80462. Fix this Chef Automate vulnerability to stop DevOps account takeovers.

CVE-2026-80351 & CVE-2026-80352: 9.8 CVSS Apache Camel K Vulnerabilities Apache Camel K vulnerabilities diagram highlighting CVE-2026-80352
  • Vulnerability Report

CVE-2026-80351 & CVE-2026-80352: 9.8 CVSS Apache Camel K Vulnerabilities

Do Son September 11, 2026 0

Three critical Apache Camel K vulnerabilities, including CVE-2026-80352, allow code injection and eval injection. Patch these critical flaws immediately.

CVE-2026-89049 (CVSS 9.9): AWS SSM Agent SSRF Flaw AWS Systems Manager Agent server-side request forgery diagram
  • Vulnerability Report

CVE-2026-89049 (CVSS 9.9): AWS SSM Agent SSRF Flaw

Do Son September 11, 2026 0

A critical server-side request forgery flaw in the AWS Systems Manager Agent allows IAM credential theft. Patch your AWS Systems Manager Agent immediately.

CVE-2026-89094 Forgejo Remote Code Execution Hits CVSS 9.9 Diagram of critical Forgejo remote code execution and Forgejo remote code execution flaw
  • Vulnerability Report

CVE-2026-89094 Forgejo Remote Code Execution Hits CVSS 9.9

Do Son September 11, 2026 0

A critical Forgejo remote code execution flaw, tracked as CVE-2026-89094, threatens Git servers. Patch this Forgejo remote code execution bug today.

Replace slmgr.vbs: Windows Activation via PowerShell Windows activation PowerShell script replacement and slmgr.vbs deprecation
  • Windows

Replace slmgr.vbs: Windows Activation via PowerShell

Do Son September 11, 2026 0

Discover why Microsoft is deprecating slmgr.vbs and learn how to transition your Windows activation PowerShell workflows for future system management.

A Configuration Error Exposes Surfshark Internal Infrastructure Surfshark VPN test server breach diagram and internal infrastructure compromise
  • Data Leak

A Configuration Error Exposes Surfshark Internal Infrastructure

Do Son September 11, 2026 0

Discover the details of the Surfshark test server breach. Learn how a configuration error exposed internal secrets and how the VPN provider responded.

Android Password Manager Migration Simplifies Passkey Transfers Android password manager migration interface and FIDO credential exchange
  • Android

Android Password Manager Migration Simplifies Passkey Transfers

Do Son September 11, 2026 0

Discover the new Android password manager migration feature. Learn how to securely transfer passkeys, passwords, and data between apps using FIDO standards.

Two VLC Media Player Flaws Expose Heap Memory, No Fix Yet VLC media player vulnerabilities allowing heap out-of-bounds write via crafted PNG and heap out-of-bounds read via malicious RTSP server
  • Vulnerability Report

Two VLC Media Player Flaws Expose Heap Memory, No Fix Yet

Do Son September 11, 2026 0

Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.

AI Losing Control Risk: Anthropic & OpenAI Face Crisis AI losing control risk conceptual illustration, rogue artificial intelligence behavior
  • Technology

AI Losing Control Risk: Anthropic & OpenAI Face Crisis

Do Son September 11, 2026 1

Explore the escalating AI losing control risk as Anthropic researchers resign, models show reckless behavior, and OpenAI agents hide secret communications.

Dell Patches Critical ThinOS Vulnerabilities Dell ThinOS vulnerabilities diagram showing command injection flaws
  • Vulnerability Report

Dell Patches Critical ThinOS Vulnerabilities

Do Son September 11, 2026 0

Dell patched critical Dell ThinOS vulnerabilities, including CVE-2026-81467. Update your ThinOS clients now to stop remote code execution attacks.

CVE-2026-88062 (CVSS 9.5): OmniRoute RCE Flaw PoC Disclosed OmniRoute RCE flaw and CVE-2026-88062 exploitation diagram
  • Vulnerability Report

CVE-2026-88062 (CVSS 9.5): OmniRoute RCE Flaw PoC Disclosed

Do Son September 11, 2026 0

A critical CVSS 9.5 OmniRoute RCE flaw (CVE-2026-88062) has public PoC exploit code available. Upgrade your AI gateway immediately to prevent compromises.

ClearFake WebDAV Infection Chain Targets Systems Globally Half-click exploits chain showing webmail zero-days used by TA488 and TA458 against Zimbra, SOGo and Roundcube mailservers
  • Malware

ClearFake WebDAV Infection Chain Targets Systems Globally

Do Son September 11, 2026 0

A ClearFake WebDAV infection chain deployed Amatera malware. See how the ClearFake WebDAV infection chain drops crypto stealers on targets.

KB5002914 Breaks Copy and Paste in Microsoft Excel KB5002914 Excel update breaking copy paste and formula dragging on a spreadsheet
  • Windows

KB5002914 Breaks Copy and Paste in Microsoft Excel

Do Son September 11, 2026 0

The Excel KB5002914 security update breaks copy, paste, and formula dragging across Office 2016 to 2024. Here is what is happening and how to fix it.

Google Launches a Native Gemini Desktop App for Windows Gemini for Windows native desktop app floating overlay summoned with Alt Space shortcut
  • Technology

Google Launches a Native Gemini Desktop App for Windows

Do Son September 11, 2026 0

Gemini for Windows is here as a native desktop app for Windows 10 and 11, summoned with Alt + Space to take on Microsoft Copilot head-on.

OpenAI Suspends New ChatGPT Pro 20x Subscriptions OpenAI logo displayed on a smartphone screen showing the ChatGPT Pro 20x suspended notification
  • Technology

OpenAI Suspends New ChatGPT Pro 20x Subscriptions

Do Son September 11, 2026 0

OpenAI has suspended new ChatGPT Pro 20x subscriptions due to severe capacity shortages. Discover how this impacts GPT-6 Astra users and API billing costs.

Phishing Campaign Exploits Google Infrastructure for Data Theft A diagram showing how attackers abuse Google infrastructure for credential harvesting
  • Cybercriminals

Phishing Campaign Exploits Google Infrastructure for Data Theft

Do Son September 11, 2026 0

A sophisticated phishing campaign uses redirect chains to abuse Google infrastructure. Learn how attackers abuse Google infrastructure to steal credentials.

Ubuntu 24.04.5 LTS Arrives With the Linux 7.0 Kernel Ubuntu 24.04.5 LTS release desktop with Linux 7.0 HWE kernel and Mesa graphics stack
  • Linux

Ubuntu 24.04.5 LTS Arrives With the Linux 7.0 Kernel

Do Son September 11, 2026 0

Ubuntu 24.04.5 LTS is here as the final Noble point release, shipping the Linux 7.0 HWE kernel and Mesa 26.2 with support until May 2029.

Apple Extends Free iPhone Satellite Access for Another Year Apple free satellite access extension for iPhone 14 15 16 Emergency SOS via satellite
  • Technology

Apple Extends Free iPhone Satellite Access for Another Year

Do Son September 11, 2026 0

Apple extends free satellite access another year for iPhone 14, 15, and 16 users, confirmed quietly in the iPhone 18 Pro press release. Details here.

MacSync macOS Stealer Spreads via ClickFix Lures MacSync macOS stealer architecture and MacSync macOS stealer ClickFix lures diagram
  • Malware

MacSync macOS Stealer Spreads via ClickFix Lures

Do Son September 11, 2026 0

The MacSync macOS stealer targets Apple users worldwide. See how MacSync macOS stealer ClickFix lures evade Gatekeeper to steal sensitive credentials.

SonicWall SMA 1000 Flaw (CVE-2026-15409) Hits UK Council Diagram of the active SonicWall SMA 1000 campaign and SonicWall SMA 1000 campaign attack flow
  • Cybercriminals

SonicWall SMA 1000 Flaw (CVE-2026-15409) Hits UK Council

Do Son September 11, 2026 0

An active SonicWall SMA 1000 campaign breached a UK council. Learn how the SonicWall SMA 1000 campaign exposed Active Directory records worldwide.

CVE-2026-16338: 9.9 CVSS IBM DataStage Arbitrary File Write Flaw IBM DataStage vulnerabilities and critical IBM DataStage vulnerabilities diagram
  • Vulnerability Report

CVE-2026-16338: 9.9 CVSS IBM DataStage Arbitrary File Write Flaw

Do Son September 11, 2026 0

Patch CVE-2026-16338 immediately. Learn how this 9.9 CVSS flaw allows arbitrary file write attacks in IBM DataStage and how to secure your data today.

CVSS 9.5: CSF Plugin Vulnerabilities CVE-2026-65638 and CVE-2026-65639 Diagram of CSF plugin vulnerabilities causing remote code execution
  • Vulnerability Report

CVSS 9.5: CSF Plugin Vulnerabilities CVE-2026-65638 and CVE-2026-65639

Do Son September 11, 2026 0

Two critical CSF plugin vulnerabilities, CVE-2026-65638 and CVE-2026-65639, allow remote code execution. Patch your ConfigServer firewall immediately.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    Admin intel📅 Updated: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    CISA KEV📅 Added to KEV: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-62863CVSS 9.6
    MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode...
    📅 Updated: Oct 30, 2026
  • CVE-2026-62849CVSS 9.1
    ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS...
    📅 Updated: Oct 30, 2026
  • CVE-2026-62853CVSS 9.9
    ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and...
    📅 Updated: Oct 30, 2026
  • CVE-2026-117666CVSS 9.1
    Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to...
    📅 Updated: Oct 30, 2026
  • CVE-2026-79858CVSS 9.8
    An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated...
    📅 Updated: Oct 30, 2026
  • CVE-2026-79875CVSS 9.3
    A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent...
    📅 Updated: Oct 30, 2026
  • CVE-2026-79876CVSS 9.3
    A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker...
    📅 Updated: Oct 30, 2026
  • CVE-2026-79846CVSS 10.0
    Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to...
    📅 Updated: Oct 30, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.