Python Package Index

PyPI File Hosting Errors: 502s Traced to Fastly Cache PyPI file hosting errors dashboard showing Fastly CDN 502 and 503 cache node failures

PyPI file hosting errors dashboard showing Fastly CDN 502 and 503 cache node failures

PyPI File Hosting Errors: 502s Traced to Fastly Cache

Do Son September 8, 2026

For roughly two weeks in August 2026, developers ran into a wave of PyPI file hosting errors...

PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

PyPI Warns of Sophisticated Phishing Campaign Targeting Python Developers

Do Son July 29, 2025

The Python Package Index (PyPI), the central repository for Python developers around the world, has issued a...

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads PyPI Spam, Package Impersonation

PyPI Spam, Package Impersonation

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads

Do Son July 17, 2025

The Python Package Index (PyPI) has banned new account registrations and email additions from the inbox.ru domain,...

Roblox Cheaters Targeted: Skuld Stealer and Blank Grabber Malware Lurks in PyPI Packages Skuld Stealer & Blank Grabber

Skuld Stealer & Blank Grabber

Roblox Cheaters Targeted: Skuld Stealer and Blank Grabber Malware Lurks in PyPI Packages

Do Son October 1, 2024

In a recent report by Imperva Threat Research, malicious actors have been found exploiting the Python Package...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026
CVE-2025-39682CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2025-39964CVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-53266CVSS 8.8
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026

CVE-2026-61516CVSS 9.8
Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the...
📅 Updated: Sep 19, 2026
CVE-2026-81321CVSS 9.8
CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains...
📅 Updated: Sep 19, 2026
CVE-2026-75878CVSS 9.1
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session...
📅 Updated: Sep 19, 2026
CVE-2026-80441CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality...
📅 Updated: Sep 19, 2026
CVE-2026-80442CVSS 9.9
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality....
📅 Updated: Sep 19, 2026
CVE-2026-82340CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the...
📅 Updated: Sep 19, 2026
CVE-2026-82832CVSS 9.6
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper...
📅 Updated: Sep 19, 2026
CVE-2026-82967CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to...
📅 Updated: Sep 19, 2026