Security Digest archive
October 2026
24 editorial briefs, 24 known exploited (cisa kev) additions and 82 critical advisories across 15 digest days.
Wednesday, October 21, 2026
- Act now PHP2Shell: Critical Unauthenticated RCE in PHP
- Patch this week Node.js October 2026 Security Releases: 10 CVEs Fixed
- Act now LiteLLM 1.107.0: Malicious PyPI and Docker Release
- Critical 3 advisories: Pillow, storybook, Pillow
Tuesday, October 20, 2026
- Act now Plex2Shell: Exploited RCE Chain in Plex Media Server
- Patch this week eMudhra CA Key Compromise: Update Non-Browser TLS Clients
- KEV CVE-2026-96656 Plex Media Server
- KEV CVE-2026-96655 Plex Media Server
- KEV CVE-2026-96654 Plex Media Server
- KEV CVE-2026-96652 Plex Media Server
- KEV CVE-2026-110936 Siemens Software Center
- KEV CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition
- Critical 3 advisories: uv, Pillow, certifi
Monday, October 19, 2026
Friday, October 16, 2026
- Act now ConnectWise Cloud Backup: App Credential Abused in M365
- Patch this week Pillow 13.0.0: Critical Image-Parsing Memory Bugs Fixed
- KEV CVE-2026-102764 BeyondTrust Remote Support
- KEV CVE-2025-61624 Fortinet Multiple Products
- Critical 2 advisories: lmcache, claude-agent-sdk
Thursday, October 15, 2026
- Act now BeyondTrust Remote Support CVE-2026-102764 Zero-Day
- Check exposure Siemens Software Center DLL Flaw Abused in ClickFix Attacks
- KEV CVE-2026-21589 Atlassian Multiple Products
- Critical 6 advisories: vitess.io/vitess, @tanstack/start-server-core, github.com/dgraph-io/dgraph/v25, github.com/argoproj/argo-cd/v2, github.com/kedacore/keda, github.com/containers/podman
Wednesday, October 14, 2026
- Patch this week Next.js: Two Critical Unauthenticated RCEs (Oct 14)
- Patch this week PAN-OS CVE-2026-0322: Exploited Management-Interface RCE
- Patch this week SiteGuard WAF CVE-2026-106931: Exploited Command Injection
- KEV CVE-2026-76519 Cisco Secure Email Gateway
- KEV CVE-2026-105134 Ahsay AhsayCBS
- KEV CVE-2026-105133 Ahsay AhsayCBS
- KEV CVE-2026-0322 Palo Alto Networks PAN-OS
Tuesday, October 13, 2026
- Act now Ivanti Connect Secure CVE-2026-104935: Exploited Zero-Day
- Patch this week Visual Studio Copilot CVE-2026-103572: Trailing-Dot RCE
- Patch this week Windows Shell CVE-2026-96951: Exploited MOTW Bypass
- Check exposure Podman CVE-2026-94603: Images Can Disable the Sandbox
- Most can relax SlugFest: npm Trusted Publishing Repo-Name Hijack
- KEV CVE-2026-96951 Microsoft Windows
- KEV CVE-2026-104935 Ivanti Connect Secure
- Critical 3 advisories: Microsoft.AspNetCore.App.Runtime.linux…, Microsoft.AspNetCore.App.Runtime.linux…, Microsoft.Native.Quic.MsQuic.Schannel
Friday, October 9, 2026
- Critical 4 advisories: tinacms, code.vikunja.io/api, github.com/0xJacky/Nginx-UI, contao/comments-bundle
Thursday, October 8, 2026
- Patch this week Go October 2026 Security Releases: 16 Stdlib Fixes
- Check exposure ProFTPD mod_copy CVE-2015-3306: 2015 Bug Added to KEV
- KEV CVE-2023-22894 Strapi Strapi
- KEV CVE-2021-3199 ONLYOFFICE Docs
- KEV CVE-2016-3081 Apache Struts
- KEV CVE-2015-5477 ISC BIND
- KEV CVE-2015-3306 ProFTPD ProFTPD
- Critical 7 advisories: fast-jwt, handlebars, org.asynchttpclient:async-http-client, praisonai, handlebars, com.hazelcast:hazelcast, praisonaiagents
Wednesday, October 7, 2026
- Patch this week Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026)
- Check exposure GhostAction: Fake Security Workflows Steal GitHub Secrets
- Critical 12 advisories: flowise, langflow, github.com/sipcapture/homer-app, @payloadcms/plugin-form-builder, quasar, vm2, PraisonAI, @backstage/plugin-scaffolder-backend, payload, flowise, github.com/sipcapture/homer-app, payload
Tuesday, October 6, 2026
- Critical 6 advisories: Microsoft.Native.Quic.MsQuic.OpenSSL, payload, payload, @payloadcms/plugin-import-export, shell-quote, langflow
Monday, October 5, 2026
- Act now Atlassian Data Center File Read CVE-2026-21589 Exploited
- Critical 17 advisories: vm2, simple-git, vm2, @simple-git/argv-parser, @capacitor/android, seroval, langflow, proxy-addr, vm2, vm2, vm2, langflow …
Sunday, October 4, 2026
- Act now AhsayCBS: Exploited Pre-Auth RCE Chain in Backup Server
- KEV CVE-2026-88779 Citrix NetScaler
Friday, October 2, 2026
- KEV CVE-2026-102490 Zammad GmbH Zammad
- KEV CVE-2026-102489 Zammad GmbH Zammad
- Critical 5 advisories: gitea.com/gitea/runner, vibe-trading-ai, vibe-trading-ai, trigger.dev, @a2ui/web_core
Thursday, October 1, 2026
- Act now FortiMail CVE-2026-104286: Exploited Pre-Auth File Write
- KEV CVE-2026-104286 Fortinet FortiMail
- Critical 12 advisories: vm2, vm2, vm2, vm2, vm2, vm2, vm2, piscina, vm2, vm2, github.com/siyuan-note/siyuan/kernel, vm2