🛡️ Cybersecurity & Technology News
BleepingComputer
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Microsoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates. [...]
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and...
Global takedown hits network behind 1 billion phishing messages
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide. [...]
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. [...]
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled. [...]
OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. [...]
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. [...]
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
Microsoft releases Windows 10 KB5126657 extended security update
Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. [...]
TechCrunch (All)
Ricursive Intelligence is betting on AI-designed chips to help solve the compute crisis
The founders detailed how their startup is developing AI that can design chips, learn from each iteration, and improve subsequent designs, all with the goal of automating and accelerating the chip design process.
Flock CEO defends surveillance technology amid national backlash: ‘We shouldn’t pause progress’
At TechCrunch Disrupt, Flock CEO Garrett Langley defended his company's surveillance technology despite growing privacy concerns, arguing that its crime-fighting benefits outweigh the risks of abuse.
Meet the five companies competing in the Startup Battlefield finals at Disrupt 2026
It’s time to unveil the five companies that will be competing in the Startup Battlefield finals.
Gudea leverages AI to help organizations prevent social media crises before they erupt
Every day, conversations unfold across social media and websites around the world. A seemingly insignificant post—whether it involves AI-generated misinformation, hate speech, or a damaging rumor—can quickly snowball into a much larger public...
Intero Biosystems wants drugmakers to test on mini human intestines, not animals
Intero Biosystems is selling lab-grown human intestines to drugmakers as regulators push for alternatives to animal testing, while the startup looks to scale production and expand its organoid technology.
CedarDB wants one database to handle both transactions and analytics, as AI agents raise the stakes
Databases have traditionally been designed either for analytical data or for operational data. But database engine CedarDB supports both, and its approach has gained relevance with the rise of agentic AI.
Ambani’s Jio seeks to raise $3.2B in what could be India’s biggest IPO
Jio plans to use most of its IPO proceeds to repay debt as it expands beyond telecom.
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the public who are concerned about the misuse of its technology.
Colossal Biosciences announces new AI platform to help accelerate de-extinction efforts
Colossal announced a new AI platform to help accelerate its de-extinction efforts and Peter Diamandis has launched a new fund to back startups who use it.
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not canceled contracts of any police department or law enforcement agency, despite reports of abuse.
Electric vehicle sales in the US are showing signs of life
The electric vehicle market in the U.S. has been growing for the last three consecutive quarters.
TimeTeller puts our internal clocks at the center of personalized medicine
German startup TimeTeller has developed a saliva test kit to help anyone understand their circadian rhythm; it aims to reduce side effects from cancer treatments.
Ambrosia Energy will build a 10 GWh factory in Texas to make batteries for off-grid data centers
Startup Ambrosia Energy will build a massive factory to crank out batteries to augment solar panels, creating a round-the-clock clean power plant.
Hiyd is a health tracker that attaches to the watch you already wear
Former Apple engineers figured out how to get a biometric sensor to attach to your watch without any magnets or adhesives.
YouTube Music launches new labels as AI-generated music floods streaming platforms
The label will appear on the player page and include songs entirely generated by AI or partially, such as AI involved in composition and vocals.
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.
Mosqitter is turning its mosquito traps into an AI-powered surveillance network
Mosqitter is turning its mosquito-trapping hardware into an AI-powered surveillance network designed to identify species, monitor populations, and provide earlier warnings of mosquito-borne disease risks.
Prismm helps banks keep inherited money in-house
With Prismm, account holders can give designated family members access to their accounts and documents ahead of time.
Deezer will soon let you filter out AI-generated music
Deezer said that the new toggle will be rolled out by the end of the year.
Save 50% on your TechCrunch Disrupt 2026 ticket and join the last 2 days in San Francisco’s Moscone West
Get a 50% discount on the last two days of TechCrunch Disrupt 2026, October 14-15, in San Francisco. Register now and join the rest of the startup ecosystem. Today, it's all about physical and software AI.
How-to-Geek
Finding downloaded files in Googlebook OS
Everything you need to know about finding all your files on your Googlebook.
Bored with Google Maps and Spotify? Try these 4 Android Auto apps
These are called GEMS.
The power drill setting that beginners overlook (and pros use constantly)
That numbered collar behind your drill chuck controls how hard you drive screws.
4 dark Paramount+ thrillers to watch this week (October 12-18)
Paramount+ has a new No. 1 with fangs, plus a two-part rescue mission and two greedy schemes that go horribly sideways.
Speed tests won't tell you this, but your NAS is the real bottleneck
The one time your ISP isn't to blame.
5 free VLC alternatives that play everything and cost nothing
VLC isn't your only option. Discover five free media players with unique features for video playback, customization, and managing your media library.
4 more Netflix originals that are so good they deserve a theatrical release
A Martin Scorsese crime drama and a heartfelt romantic comedy are on the list of Netflix originals I want to see in theaters.
Google Maps has a clever way to find places without an address
This feature can actually help you navigate better.
I tested the 9 most popular Linux desktop environments, here’s how I’d rank them
I tested nine Linux desktop environments to find out which ones offer the best balance of features, customization, performance, and usability.
Your unused Raspberry Pi is a guilt trap, and these are the 5 easy projects that can help you escape it
Don't let your Pi go stale.
This Week In 4n6
Week 41 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 40 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 39 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 38 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 37 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 36 – 2026
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form! No sponsor this week
Week 35 – 2026
At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice and there are already enough dedicated year-old...
Week 34 – 2026
At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice and there are already enough dedicated year-old...
Week 33 – 2026
At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice and there are already enough dedicated year-old...
Week 32 – 2026
At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice and there are already enough dedicated year-old...
Reddit RSS
Mentorship Monday - Post All Career, Education and Job questions here!
<!-- SC_OFF --><div class="md"><p>This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do <em>you</em> want to know about certs/degrees, job requirements, and any other general...
'123456' password was all a hacker reportedly needed to expose over 8 million people's personal data
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x5vd9w/123456_password_was_all_a_hacker_reportedly/"> <img alt="'123456' password was all a hacker reportedly needed to expose over 8 million people's personal data"...
AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x5yiix/ai_agents_arent_going_rogue_frontier_labs_are/"> <img alt="AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics."...
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x67do0/palo_alto_networks_warns_of_panos_rce_flaw/"> <img alt="Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks"...
Multiple Flaws: Chrome 155 Update Patches 37 Security Flaws, 7 of Them Critical
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x5q397/multiple_flaws_chrome_155_update_patches_37/"> <img alt="Multiple Flaws: Chrome 155 Update Patches 37 Security Flaws, 7 of Them Critical"...
How did cybersecurity professionals from service based companies land at Microsoft,Palo Alto, Cisco.
<!-- SC_OFF --><div class="md"><p>These days I'm seeing many cyber security people who started their careers at some service based companies mostly as a SOC Analyst currently working at product based companies like microsoft, Palo Alto, Cisco....
The nightmare of securing RAG pipelines in production... thoughts?
<!-- SC_OFF --><div class="md"><p>Honestly it feels like every dev team is rushing to spin up internal LLMs and RAG pipelines, but the security side is just a complete wild west right now. Traditional WAFs and DLP solutions definetly aren't...
Is deception technology actually useful for detecting attackers, or is it just another layer of alerts?
<!-- SC_OFF --><div class="md"><p>We talk a lot about EDR, SIEM, firewalls, and threat intelligence, but I'm interested in where deception technology fits into a real security environment.</p> <p>Decoy servers, honeytokens, and fake credentials...
French supermarket fridges were pushed to 50°C overnight through Danfoss controllers that no longer get security updates
<!-- SC_OFF --><div class="md"><p>On the night of October 11, someone got into the refrigeration controllers at French supermarkets and put them into forced defrost with the target set to 50°C. A store manager in Gradignan, quoted by [ITPro](<a...
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x58sqp/anthropic_warns_small_ai_models_could_soon_form/"> <img alt="Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets"...
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x5acu1/ivanti_misses_opportunity_to_fix_vulnerability/"> <img alt="Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day"...
Does meta security engineer interviews include coding round?
<!-- SC_OFF --><div class="md"><p>Basically the title. I work in product security and penetration testing, interviewing for meta. Since I rarely do coding I was wondering if they have heavy coding round and how people tackle this.</p> </div><!--...
How do I get out of pentesting ?
<!-- SC_OFF --><div class="md"><p>I was super ecstatic landing this job out of schoo1, but reality just hit me and I realized I can never make the big bucks here. My passion for pentesting also has been fading away after countless engagements and...
How do you handle team mates who refuse to use your tools that you created for the team and like to create their own?
<!-- SC_OFF --><div class="md"><p>I was given a task to create a tool for the team. This colleague was working on similar ideas and seemed to be unhappy. Now it seems like he doesn't want to provide any feedback at all.</p> </div><!-- SC_ON -->...
Is switching from Veracode to Checkmarx worth it?
<!-- SC_OFF --><div class="md"><p>We’ve been on Veracode for about three years across Java, .NET and a growing pile of Node services. Renewal is in Jan and I gotta decide by the end of November.</p> <p>Most of the push to look elsewhere comes...
AI agents connecting to networking infrastructure
<!-- SC_OFF --><div class="md"><p>I'm seeing some prominent channels on YT showcasing AI agents (ie Hermes) managing networking infrastructure. </p> <p>Is it just me, or are we being gaslit into thinking its practical and productive to provide...
Cybersecurity statistics of the week (October 5th - October 11th)
<!-- SC_OFF --><div class="md"><p>Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here.</p> <p>All the reports and research below were...
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x4xy0a/cyber_exec_arrested_in_case_allegedly_tied_to/"> <img alt="Cyber exec arrested in case allegedly tied to ShinyHunters hackers"...
EC-Council Disaster Recovery Professional (EDRP) Question
<!-- SC_OFF --><div class="md"><p>I’m am studying for the EDRP and I am going through the book and the videos, but I am wondering about the labs. Does anyone know if there are even any lab type questions on the exam? This cert seems heavily focus...
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x5wx8n/curl_patches_http2_upload_flaw_after_poc/"> <img alt="curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution"...
Looking for a RECENT public email dataset with full headers (phishing and legitimate)
<!-- SC_OFF --><div class="md"><p>Hey, so I do not know if this is the correct place to ask this; if not, can someone point me to the correct subreddit to ask this 🙏🏻</p> <p>I'm researching phishing detection that combines email header evidence...
Flock can now issue CVEs for its own products. Should we trust it?
<table> <tr><td> <a href="https://www.reddit.com/r/cybersecurity/comments/1x50sg2/flock_can_now_issue_cves_for_its_own_products/"> <img alt="Flock can now issue CVEs for its own products. Should we trust it?"...
I tested Muse AI and Grok Bot. Different agents, surprisingly similar browser intel.
<!-- SC_OFF --><div class="md"><p>Two days ago, I shared a comparison of Muse and Instinct AI. Their browser environments looked quite different. I’ve now tested Grok Bot against the same instrumented website login flow.</p> <p>Here’s how Grok...
CCNA or PenTest?
<!-- SC_OFF --><div class="md"><p>Ideally my goal is to get both certifications. But what I am not sure on is which to go for first. Reading over the PenTest exam objectives and some other information it appears you need to have some networking...
Opinion about my Final year project ideas: XDR implementation and scam detection
<!-- SC_OFF --><div class="md"><p>Hi everyone, I’m a final year computing student trying to decide on my final year project. I’m interested in two areas: <strong>XDR (Extended Detection and Response) implementation</strong> and <strong>scam...
CVEfeed.io
CVE-2026-0993 - SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
<strong>CVE ID :</strong>CVE-2026-0993 <br /> <strong>Published :</strong> Oct. 15, 2026, 12:40 a.m. | 48 minutes ago <br /> <strong>Description :</strong>SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow...
CVE-2026-110809 - sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
<strong>CVE ID :</strong>CVE-2026-110809 <br /> <strong>Published :</strong> Oct. 15, 2026, 12:16 a.m. | 1 hour, 12 minutes ago <br /> <strong>Description :</strong>A security vulnerability has been detected in sgl-project SGLang up to...
CVE-2026-110810 - ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds
<strong>CVE ID :</strong>CVE-2026-110810 <br /> <strong>Published :</strong> Oct. 15, 2026, midnight | 1 hour, 28 minutes ago <br /> <strong>Description :</strong>A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This...
CVE-2026-110873 - Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field
<strong>CVE ID :</strong>CVE-2026-110873 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Heym from 0.0.55 before 0.0.121 contains a privilege escalation...
CVE-2026-110872 - Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing
<strong>CVE ID :</strong>CVE-2026-110872 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity...
CVE-2026-110871 - Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service
<strong>CVE ID :</strong>CVE-2026-110871 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Nodemailer from 3.0.0 before 10.0.10 contains a denial of service...
CVE-2026-110870 - Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments
<strong>CVE ID :</strong>CVE-2026-110870 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Nodemailer from 3.0.0 before 10.0.13 contains an improper input...
CVE-2026-110869 - Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes
<strong>CVE ID :</strong>CVE-2026-110869 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of...
CVE-2026-110868 - Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
<strong>CVE ID :</strong>CVE-2026-110868 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Renovate before 44.79.0 contains a server-side request forgery...
CVE-2026-110867 - Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset
<strong>CVE ID :</strong>CVE-2026-110867 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Renovate before 44.60.1 contains an allowlist bypass vulnerability that...
CVE-2026-110866 - Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
<strong>CVE ID :</strong>CVE-2026-110866 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Renovate before 44.61.3 contains a protection mechanism bypass...
CVE-2026-110865 - Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets
<strong>CVE ID :</strong>CVE-2026-110865 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Renovate before 44.60.1 contains an allowlist bypass vulnerability that...
CVE-2026-110864 - Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy
<strong>CVE ID :</strong>CVE-2026-110864 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication...
CVE-2026-110863 - Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers
<strong>CVE ID :</strong>CVE-2026-110863 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an...
CVE-2026-110862 - Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link
<strong>CVE ID :</strong>CVE-2026-110862 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication...
CVE-2026-110861 - Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition
<strong>CVE ID :</strong>CVE-2026-110861 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17...
CVE-2026-110860 - GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()
<strong>CVE ID :</strong>CVE-2026-110860 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in...
CVE-2026-110859 - GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name
<strong>CVE ID :</strong>CVE-2026-110859 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython before 3.2.0 contains an argument injection vulnerability in...
CVE-2026-110858 - GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec
<strong>CVE ID :</strong>CVE-2026-110858 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython from 3.1.30 before 3.2.0 contains a remote code execution...
CVE-2026-110857 - GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs
<strong>CVE ID :</strong>CVE-2026-110857 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython before 3.2.0 contains a remote code execution vulnerability...
CVE-2026-110856 - GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date
<strong>CVE ID :</strong>CVE-2026-110856 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython before 3.2.0 contains a regular expression denial of service...
CVE-2026-110855 - GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name
<strong>CVE ID :</strong>CVE-2026-110855 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>GitPython before 3.2.0 contains an information disclosure vulnerability...
CVE-2026-110854 - Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error
<strong>CVE ID :</strong>CVE-2026-110854 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not...
CVE-2026-110853 - n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON
<strong>CVE ID :</strong>CVE-2026-110853 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>n8n before 1.123.83 contains an authorization bypass vulnerability that...
CVE-2026-110852 - n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution
<strong>CVE ID :</strong>CVE-2026-110852 <br /> <strong>Published :</strong> Oct. 14, 2026, 11:17 p.m. | 2 hours, 11 minutes ago <br /> <strong>Description :</strong>n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1...