PHP2Shell: Critical Unauthenticated RCE in PHP
If PHP answers HTTP requests anywhere you run it, patch or apply a vendor fix today; this is pre-application, unauthenticated, and attack traffic started before the patch shipped.
Security Digest · 198 briefs
Security briefs
The incidents worth your attention, each with an honest verdict. Many scary headlines need no action from most teams; a few need everything dropped. We say which, and for whom.
The verdict scale
- Act now Drop what you are doing if this applies to you. 70
- Patch this week Real risk; schedule the fix within days, not weeks. 37
- Check exposure Only matters in specific setups; find out whether you have one. 79
- Monitor Nothing to do yet; watch for exploitation or a fix. 0
- Most can relax Scary headline, narrow impact. Most teams need no action. 12
2026
Node.js October 2026 Security Releases: 10 CVEs Fixed
Four high-severity fixes, including a Brotli decoder memory-corruption bug the project says permits remote code execution, make this a routine-but-real upgrade: roll every supported line forward this week.
LiteLLM 1.107.0: Malicious PyPI and Docker Release
Check right now whether anything installed litellm 1.107.0 or pulled a LiteLLM image by a floating tag on October 21; if it did, assume every secret that host could read is stolen.
Plex2Shell: Exploited RCE Chain in Plex Media Server
A public proof of concept chains four Plex bugs into code execution without credentials, and attackers have used it since October 17: update any internet-reachable server now, then check it for a miner or proxy.
eMudhra CA Key Compromise: Update Non-Browser TLS Clients
Anyone can mint certificates from these broken CA keys, but only clients that skip Certificate Transparency and still trust the emSign root are exposed, and only to an on-path attacker: update those trust bundles this week, build machines first.
ConnectWise Cloud Backup: App Credential Abused in M365
If any tenant you run or manage ever consented to a ConnectWise or SkyKick app, disable those apps and audit the tenant today; attackers used the vendor's own credential to sign in as the app, so MFA did not stop them.
Pillow 13.0.0: Critical Image-Parsing Memory Bugs Fixed
If your service opens images that users or the internet supply, move to Pillow 13.0.0 this week; the worst bugs are memory corruption reachable from a crafted file, and reproducers are in the published advisories.
BeyondTrust Remote Support CVE-2026-102764 Zero-Day
If you run a self-hosted BeyondTrust Remote Support appliance, patch it today and assume it may already be compromised; an espionage group used this as a zero-day for about seven weeks.
Siemens Software Center DLL Flaw Abused in ClickFix Attacks
Siemens users get the fix automatically, but the real threat is attackers shipping their own signed, older copy as a malware loader, so Windows defenders should block the indicators and hunt rather than rely on patching.
Next.js: Two Critical Unauthenticated RCEs (Oct 14)
Self-hosted Next.js apps should move to 16.4.1 or 15.5.28 this week; both RCEs have preconditions and no exploitation is reported, but the fix is a routine minor upgrade.
PAN-OS CVE-2026-0322: Exploited Management-Interface RCE
Patch every PAN-OS firewall and Panorama this week, and today if the management interface is reachable from the internet; the bug needs an admin login but is already being exploited.
SiteGuard WAF CVE-2026-106931: Exploited Command Injection
If you run SiteGuard Server Edition, save its diagnostic data and patch this week, sooner on public web servers; the bug is exploited, but its local rating means attackers need a foothold first.
Ivanti Connect Secure CVE-2026-104935: Exploited Zero-Day
Upgrade Connect Secure today and investigate with memory and network forensics, because the Integrity Checker missed this compromise and part of the attack chain still has no fix.
Visual Studio Copilot CVE-2026-103572: Trailing-Dot RCE
If your developers use Copilot in Visual Studio or SSMS, update this week: exploitation needs only text the agent reads, and the researcher's write-up spells out the chain.
Windows Shell CVE-2026-96951: Exploited MOTW Bypass
Roll the October 2026 Windows update out to every desktop this week; attackers are using this to make malicious attachments and downloads skip the warnings that would stop them.
Podman CVE-2026-94603: Images Can Disable the Sandbox
If you run third-party images with rootful Podman, upgrade to 5.8.8 or 6.1.3 now, because an image can switch off the sandbox you asked for; rootless Podman and trusted-image-only hosts can patch on a normal cycle.
SlugFest: npm Trusted Publishing Repo-Name Hijack
The hole was closed on npm's side on October 2, 2026 and no abuse has been reported, so most teams have nothing to patch; maintainers should still spend five minutes auditing trusted publisher bindings and recent publishes.
Go October 2026 Security Releases: 16 Stdlib Fixes
Rebuild and redeploy Go services with Go 1.27.3 or 1.26.10 this week, starting with internet-facing HTTP/2 servers and reverse proxies; none of these bugs is known to be exploited.
ProFTPD mod_copy CVE-2015-3306: 2015 Bug Added to KEV
Nearly everyone fixed this a decade ago; the real job is finding any ProFTPD 1.3.5-era build with mod_copy still answering on port 21, usually inside old appliances, and replacing or removing it.
Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026)
Upgrade Argo CD to a patched 3.3, 3.4 or 3.5 release this week, and today on shared instances where people you do not fully trust can push to tracked repos or merely view an Application.
GhostAction: Fake Security Workflows Steal GitHub Secrets
If any repository you own or contribute to gained a security-audit.yml or github_actions_security.yml workflow you did not write, treat its Actions secrets, every credential ever committed to it, and the pushing account as compromised.
Atlassian Data Center File Read CVE-2026-21589 Exploited
Every self-managed Atlassian Data Center product is affected, a public detection script exists and CISA confirms exploitation; patch to a fixed LTS or block traversal patterns at the edge today.
AhsayCBS: Exploited Pre-Auth RCE Chain in Backup Server
If you or your MSP run an AhsayCBS backup server, install the October 12 hotfix today and hunt for webshells: the chain is unauthenticated, runs as SYSTEM, is being exploited by several actors, and the August patch did not fix it.
FortiMail CVE-2026-104286: Exploited Pre-Auth File Write
If you run a self-managed FortiMail, upgrade today and check Fortinet's indicators; this is an unauthenticated file-write zero-day on an internet-facing mail gateway.
Cisco SD-WAN Manager CVE-2026-76504: Exploited Auth Bypass
If you run SD-WAN Manager on-prem, upgrade now and check the logs Cisco names; one crafted HTTP request gives an unauthenticated attacker admin over the controller for your whole WAN.
Zammad CVE-2026-102489/102490: Exploited RCE-to-Root Chain
Self-hosted Zammad on 6.x is remotely exploitable and was used in a real breach: upgrade to 7.2.2 today (6.5.5 only as a stopgap), and patch DEB/RPM installs of any version to close the root escalation.
Apple CoreGraphics CVE-2026-86950: Exploited Zero-Day
A targeted file-parsing zero-day with a fix out since September 28: confirm every iPhone, iPad and Mac is on 26.7.1, 15.8.1 or a 27.x release this week, and today for high-risk users.
NetScaler CVE-2026-88771/88772: Exploited Pre-Auth RCE
Every customer-managed NetScaler ADC or Gateway needs the latest build today, and any appliance that was unpatched in September should be investigated as compromised, because patching does not evict attackers.
actions-cool Actions Re-Enabled With Mini Shai-Hulud Payload
If any workflow referenced either actions-cool action by tag and ran between September 16 and 25, 2026, assume its secrets and repository were compromised; everyone else can confirm with one grep.
WordPress Core: Page-Template File Inclusion to RCE
Every WordPress branch back to 4.7 was affected, no login is needed, public scanning tooling exists and attackers are already writing files through pearcmd.php, so confirm you are on a fixed release today.
Linux AF_UNIX CVE-2026-80521: Public Container Escape
If you run untrusted or third-party code in containers on a 6.10+ kernel, install fixed kernels as they ship and move that code behind stronger isolation now; a public exploit turns an unprivileged container process into a host compromise.
Graphalgo Malware in Go Modules and Terraform Providers
Grep your go.mod, go.sum and Terraform files for four names; if none match you are done, and if one does, treat the machine as compromised.
Linux Kernel: Five Exploited Root Bugs Added to CISA KEV
Five local root bugs, all with fixes and most with public exploits, are now confirmed exploited; get every Linux host onto a current kernel and reboot this week, container hosts, CI runners and shared servers first.
Plugin4Shell: Plugin Pin Bypass in AI Coding Agents
Claude Code and Codex users on current versions are fixed; the real exposure is Copilot or Gemini CLI plugins that auto-update from repositories hosted outside GitHub.
Cisco ISE CVE-2026-76460: Exploited CVSS 10 Auth Bypass
If you run Cisco ISE or ISE-PIC on any release before the fixed patches, patch now and hunt every node; the bug needs no login, is exploited, and Cisco warns attackers may get root and erase their tracks.
Google Pixel Modem CVE-2026-58704: Exploited Zero-Day
A targeted, no-interaction modem bug on Pixel phones with a fix already out: make 2026-09-05 the minimum patch level for every managed Pixel this week, and sooner for high-risk users.
Acronis Backup cPanel Plugin CVE-2026-87886: Exploited LPE
Only hosting servers running the Acronis Backup plugin for cPanel & WHM, Plesk or DirectAdmin are affected; on those, especially multi-tenant cPanel boxes, update the plugin now because it is being exploited.
Cisco Secure Email Gateway: Two Exploited Root RCE Bugs
Every on-premises Secure Email Gateway below 15.5.5-014 or 16.5.0-780 can be rooted by an email and both bugs are exploited: upgrade now, and check for compromise before and after, because attackers can wipe local evidence.
GitLab CVE-2026-85706: Unauthenticated File Read, Exploited
Any unpatched self-managed GitLab 18.7 or later can have its configuration and secret keys read by anyone on the network, and CISA says it is being exploited; upgrade today and rotate secrets if you were exposed.
Check Point: Exploited VPN Gateway and Management RCEs
Check Point shops should patch both gateways and management servers now: each flaw is unauthenticated RCE, both are exploited, and fixing one tier does not fix the other.
Windows Zero-Days: Update Stack and ALPC EoP (Sep 2026)
Make sure every Windows machine has the September 2026 or a later cumulative update; both bugs are exploited, but an attacker needs code running on the box first.
Magento StyleSmuggler CVE-2026-75650: Exploited Pre-Auth RCE
Any self-run Magento or Adobe Commerce store without the September hotfix should be presumed compromised: patch, then scan, then rotate the encryption key and every credential it protects, and add the October fix for the follow-on BlockStrap bug.
ScreenConnect CVE-2026-84869: Guest-to-Host File Execution
If your technicians use a ScreenConnect client older than 26.6.5, a compromised machine they connect to can run code on theirs; upgrade on-premises servers and reinstall host clients now.
MikroTrick: Exploited MikroTik RouterOS SSH Takeover Chain
If you run MikroTik routers, upgrade them now and check for an 'ops' admin account; an unauthenticated SSH chain to full admin was exploited a day before patches shipped.
Chrome V8 Zero-Days CVE-2026-85046 and CVE-2026-87491
Both were exploited zero-days, but Chrome and Edge fixed them in early September and auto-update has had six weeks to deliver the fix; the job now is finding browsers that did not update, not a scramble.
LiteLLM Proxy: Three Exploited Flaws in CISA KEV
If you run a self-hosted LiteLLM Proxy older than 1.84.0, upgrade now and treat the provider keys it holds as possibly exposed; SDK-only users are not affected.
GitSpawn: Repo Git Config Runs Code in AI Coding Agents
Update your coding agents this week and never point one at a repository that arrived as files until you have read its .git/config; ordinary clones are not affected, and no attacks have been reported.
JFrog Artifactory: Exploited Auth Bypass to Admin (KEV)
If you run self-hosted Artifactory below the fixed builds, treat it as exploited until shown otherwise: upgrade, then hunt for rogue admins, Groovy plugins and stolen signing keys, because patching does not remove them.
PaperCut NG/MF: Mass-Exploited Pre-Auth RCE Chain (KEV)
If a PaperCut NG/MF server below 24.1.10, 25.0.13 or 26.0.5 was reachable from the internet after late August, assume it was compromised: upgrade, then hunt and rebuild, because this chain gave unauthenticated attackers SYSTEM and was mass-exploited.
ownCloud CVE-2023-49105: 2023 WebDAV Bypass Now in KEV
Up-to-date ownCloud servers are fine; any ownCloud core 10.6.0 to 10.13.0 still online should be upgraded today and treated as breached, because attackers are using this bug to empty file shares.
Next.js: Windows, AVIF and next/og RCEs (Aug-Sep 2026)
Self-hosted Next.js apps still below 15.5.24 or 16.3.3 should upgrade now, ideally straight to the October releases; Windows hosts and apps optimizing untrusted AVIF images are the urgent cases.
Apache Tomcat August 2026: Security Constraint Bypasses
Upgrade Tomcat, including the copy embedded in Spring Boot apps, this week; the access-control bypasses matter wherever you rely on web.xml security constraints or container authentication, and none is known to be exploited.
Spring for GraphQL CVE-2026-59285: Pagination RCE Risk
Only Spring Boot 4 apps on Spring for GraphQL 2.0.0-2.0.4 that use Jackson 2.x and expose paginated Connection fields are at risk; if that is you, take the 2.0.5 upgrade now.
arrayref, internment, append-only-vec: Rust Crates Hijacked
Only builds that resolved the three poisoned releases during a roughly two-hour window on August 20, 2026 ran the payload, but any machine that did should be treated as compromised.
NetScaler CVE-2026-19490: Exploited Gateway Auth Bypass
Any customer-managed NetScaler with a Gateway or AAA virtual server on an August-or-older build should be upgraded today, straight to the current builds, because this bypass is being tried in the wild and later exploited NetScaler bugs are fixed in the same upgrade.
vm2: 22 Critical Sandbox Escapes, Fixed in 3.12.2
If anything outside your trust boundary can get code into vm2, upgrade to 3.12.2 today and plan to move that code out of process; if vm2 only runs your own code, upgrade on a normal cycle.
Adobe Commerce CVE-2026-71362: Exploited Account Takeover
Any Magento or Adobe Commerce store without the August 2026 isolated patch is exposed to an exploited, login-free takeover of customer accounts; apply it today.
Cisco ASA/FTD CVE-2026-20349: Exploited VPN Crash Bug
If your ASA or FTD terminates remote access VPN, SSL VPN or ZTNA, install the fixed release this week; attackers are using this to knock firewalls offline, but Cisco describes no code execution or data theft.
Windows AFD.sys CVE-2026-68820: Exploited Zero-Day EoP
A local bug, but a real zero-day: North Korea's Lazarus group used it to load a kernel rootkit, so any Windows host still missing the August 2026 or later cumulative update should be patched this week.
Metabase CVE-2026-72898: Exploited Pre-Auth SQL Injection
Self-hosted Metabase 58 through 63 below the fixed point releases can be taken over without a login and was attacked as a zero-day; upgrade now, and if the reset endpoint was reachable, assume your connected database credentials are burned.
macOS Screen Sharing CVE-2026-65400: Exploited Auth Bypass
Any Mac with Screen Sharing or Remote Management reachable from an untrusted network needs the update today and a compromise check; Macs with the service off should still update, but they were not reachable by this attack.
Gemini CLI and Claude Code Flaws Expose CI Secrets
If an AI coding agent runs in your CI on content outsiders can write (issues, PRs, comments), check versions and workflow permissions this week; laptop users on auto-update already have the fixes.
Langflow CVE-2026-9198: Exploited Unauthenticated RCE
Langflow is now the most repeatedly exploited AI-agent builder on CISA's list; any network-reachable instance below 1.10.1 should be patched today and checked for compromise.
ChainDrop: npm Worm Trojanizes keyv and cacheable Packages
These are deep transitive dependencies of ESLint-style tooling and HTTP stacks, so many projects resolved them without choosing them; if a lockfile picked up a flagged version in August 2026, treat that host as compromised.
Open VSX: 77 Evil-Twin Extensions Leak Developer Data
Check whether any of the 77 extension IDs are installed or recommended in your workspaces and remove them; this was reconnaissance, not credential theft, so blanket secret rotation is not needed.
MLflow CVE-2026-64849: Exploited Unauthenticated SSRF
If an MLflow tracking server below 3.15.0 is reachable by anyone you do not fully trust, assume attackers can read your cloud instance credentials through it: upgrade today, then check webhooks and cloud audit logs.
N-able N-central: Exploited Auth Bypass and Pre-Auth RCE
Any self-hosted N-central server below 2026.3.1.14 should be treated as exposed and patched today, and any server that was patched late needs a compromise review, because one stolen RMM console reaches every managed endpoint.
Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer
Unless Anthropic has contacted you, there is nothing to patch or rotate; the lesson is how one unvetted install of a brand-new package handed a security vendor's credentials to an agent.
VMware vCenter CVE-2026-59310: Exploited Syslog RCE
If you run vCenter and have not installed Broadcom's July 29 fix, patch today and hunt for persistence; this is unauthenticated root code execution with hundreds of victims and ransomware use.
Cisco FMC CVE-2026-20316: Exploited Hard-Coded Password
If you run on-premises Cisco FMC and have not installed the July hot fix or a September hardening release, upgrade now and check for the published indicator; the login needs no guessing and CISA ties the bug to ransomware.
Node.js July 2026 Security Releases: HTTP/2 and 11 CVEs
Routine but real: upgrade every supported Node.js line this week, sooner if you terminate HTTP/2 in Node or rely on the Permission Model as a sandbox.
Arista VeloCloud Orchestrator: Two Exploited CVSS 10 Flaws
On-prem VCO operators should move to 5.2.3.16 or 6.4.2.8 now, lock the web interface down and hunt for the published backdoor files; both flaws are exploited, and the July fixes do not cover the September bug.
Gitea CVE-2026-60004: Exploited RCE via diffpatch API
Upgrade every self-hosted Gitea below 1.27.1 today and close open registration; automated attacks sign up, create a repo and get a shell in seconds, and a proof of concept is public.
TeamCity CVE-2026-63077: Unauthenticated RCE, Exploited
Any self-hosted TeamCity server below 2025.11.7 or 2026.1.3 that an attacker can reach over HTTP(S) can be taken over without credentials, and ransomware crews are using it; patch or apply the security patch plugin today, then check for intrusions.
Check Point CVE-2026-16232: Exploited Management Auth Bypass
Install the July 2026 Jumbo Hotfix on every Check Point management server this week, and today if the server is reachable from the internet with unrestricted Trusted Clients; that is the setup attackers used to take full admin control.
Zimbra CVE-2026-73570: Exploited SNMP Command Injection
If you run Zimbra below 10.1.20, check today whether the optional zimbra-snmp package is installed with SNMP notifications on; if it is, patch and hunt for web shells, because hundreds of such servers have been compromised.
WordPress 7.0.2: REST Batch + SQL Injection Chain to RCE
Core WordPress 6.9 and 7.0 sites were exposed to unauthenticated remote code execution that is now exploited; most sites got a forced update, so your job is to confirm every one actually did.
Hugging Face Breached by Escaped OpenAI Evaluation Agents
Hugging Face found no tampering with public models, datasets, Spaces or packages, so most users only need the token rotation it recommended; anyone who ever exposed a write token publicly should assume it was found and used.
SonicWall SMA1000: Two Rounds of Exploited Zero-Days
If you run an SMA1000 appliance, install the September hotfix and check it for compromise today; the July fix alone does not cover the second pair of exploited bugs.
SharePoint: Four July-August 2026 Flaws Now Exploited
Any on-premises SharePoint farm not yet on the August 2026 builds is exposed to exploited bugs with public exploit code; patch, rotate machine keys and check for compromise now.
Sangoma Switchvox CVE-2026-9586: Pre-Auth SQLi to RCE
A single unauthenticated request turns an unpatched Switchvox PBX into a shell; if yours is below 8.4.0.2 and reachable from the internet, upgrade today and check it for compromise.
SharePoint CVE-2026-56164: Exploited Unauthenticated 0-Day
Ignore the modest vendor score: this was exploited as a zero-day against on-prem SharePoint, so internet-facing farms need the July 2026 updates, a machine-key rotation and a compromise check now.
AD FS CVE-2026-56155: Exploited EoP via Weak DKM Key ACLs
If you run AD FS, install the October 2026 or later Windows update on every farm server this week and confirm the DKM container ACL was fixed; unless you opted in, the July patch only flagged the weak permissions.
AsyncAPI npm Packages Backdoored via pull_request_target
If any build resolved @asyncapi/specs 6.11.2 or the July 14 generator releases, treat that machine as backdoored; everyone else should still fix their own pull_request_target workflows.
ServiceNow CVE-2026-6875: Pre-Auth Sandbox Escape RCE
ServiceNow-hosted customers were protected in April; the real risk is self-hosted and partner-hosted instances that have not taken the July 13, 2026 patches.
Cisco IOS CVE-2008-4128: 18-Year-Old CSRF in CISA KEV
Only organizations still running retired IOS 12.4 routers are exposed, but a Russian state unit is using this bug; find those boxes, turn off their web server today and replace them.
jscrambler npm Compromise: Infostealer in CLI Releases
Only builds that installed one of the poisoned versions during a roughly three-hour window on July 11 are at risk, but any machine that did should be treated as compromised.
Balbooa Forms CVE-2026-56291: Exploited Joomla Upload RCE
Only Joomla sites running Balbooa Forms are at risk, but for them this is an emergency: an unauthenticated web-shell upload exploited before the patch, followed by more pre-auth bugs, so update to 2.4.3.4 or later and hunt for shells.
NetScaler CVE-2026-8452: DoS Bug Exploited as Pre-Auth RCE
Any NetScaler configured as a Gateway or AAA server that is still below the June 30 builds needs patching today and a check for web shells; the bug the vendor called DoS is a public pre-auth RCE under attack.
ColdFusion CVE-2026-48282: Exploited RDS Path Traversal
Every ColdFusion 2023/2025 server should already be on the June updates; if RDS was enabled without authentication and reachable, assume the box may be compromised and hunt.
Page Builder CK CVE-2026-56290: Exploited Joomla Upload RCE
Only Joomla sites running Page Builder CK are at risk, but for them this is an emergency: an unauthenticated web-shell upload exploited within hours of the patch, with an incomplete first fix, so update to 3.6.5 or later and hunt for shells.
TrueConf Server: Exploited Pre-Auth RCE Chain on Port 4307
Only organizations that run TrueConf Server, or whose staff join meetings on other companies' TrueConf servers, are exposed; for them an unpatched, reachable server should be treated as compromised, because the chain is unauthenticated, yields SYSTEM and was used to infect the server's own users.
Zyxel GS1900 Switches: Exploited CGI Overflow (KEV)
Patch every GS1900 to the June firmware, but the urgency depends on reach: if the switch's web interface is exposed to the internet, a guest network or a flat LAN, treat it as compromised until checked; if only a locked-down admin VLAN can reach it, patch on a normal cycle this month.
SP Page Builder CVE-2026-48908: Exploited Joomla RCE
Any Joomla site still on SP Page Builder 6.6.1 or older should be updated today and treated as compromised, because automated attacks have been planting web shells and admin accounts since June.
iCagenda CVE-2026-48939: Exploited Joomla Upload-to-RCE
Only Joomla 6.0.0-6.1.1 sites running iCagenda before 4.0.8 were open to web shells; those sites need a web-shell hunt, while everyone else on iCagenda simply updates.
Oracle PeopleSoft CVE-2026-35273: ShinyHunters Zero-Day
If you run PeopleTools 8.61 or 8.62 with PIA reachable from the internet, apply Oracle's fix and lock down the EMHub/PSIGW paths today, then hunt back to May 27, 2026.
Progress LoadMaster CVE-2026-8037: Exploited Pre-Auth RCE
Only LoadMaster-based appliances with the API enabled are exposed, but for those this is unauthenticated root RCE with a public exploit; if that's you and you're below 7.2.63.2 or 7.2.54.18, patch today.
Kestra CVE-2026-49869: Exploited Unauthenticated RCE
If you run Kestra OSS below 1.0.45 or 1.3.21 and anyone untrusted can reach its API, assume it is compromised: upgrade, then rotate every secret the workers could see.
Oracle EBS Payments CVE-2026-46817: Exploited Takeover
If you run Oracle E-Business Suite 12.2 without the May 2026 Critical Security Patch Update, patch now; this is an unauthenticated, low-complexity takeover of the payments module and it has been exploited since late June.
Starlette BadHost: Host Header Auth Bypass in CISA KEV
Bump starlette to 1.0.1 or later in every Python service this week; it is urgent where an ASGI server faces untrusted clients directly and middleware makes security decisions from request.url.
Mini Shai-Hulud: TanStack npm Worm With Valid Provenance
If a lockfile picked up one of the bad TanStack Router/Start, Mistral or OpenSearch versions in mid-May 2026, treat that host as fully compromised and disable the dead-man's switch before rotating anything; everyone else can confirm and move on.
WSO2 API Manager CVE-2026-5430: Exploited JWT Auth Bypass
Any self-managed WSO2 API Manager 4.1-4.6, API Control Plane, Traffic Manager or Universal Gateway below the fixed update level should be patched now and checked for forged-token use; attackers have been sending forged admin JWTs since mid-September.
Bleeding Llama: Unauthenticated Memory Leak in Ollama
A laptop running Ollama on its default localhost binding is not reachable; a server you exposed with OLLAMA_HOST=0.0.0.0 or a published Docker port is, and it should be updated and its secrets rotated.
Copy Fail: Exploited Linux Kernel Root Exploit Since 2017
Any Linux box that runs code from more than one trust level (CI runners, container hosts, shared servers) needs a patched kernel and reboot now; single-user machines can patch on a short cycle.
FortiSandbox: Two Exploited Pre-Auth Command Injections
If any FortiSandbox runs 4.2, 4.4 below 4.4.9 or 5.0 below 5.0.6, upgrade now and check it for compromise: both bugs need no login, one has a public exploit, and attacks began in June.
Windows IKE CVE-2026-33824: Exploited Pre-Auth RCE
The fix shipped in April, so most fleets are already covered; the real risk is any unpatched Windows host that answers IKE on UDP 500 or 4500 from untrusted networks, and those need patching or blocking today.
Tomcat CVE-2026-34486: Cluster EncryptInterceptor Bypass
Exploited, but only against three specific Tomcat releases running session-replication clustering with the EncryptInterceptor and a reachable cluster port; check those three things today, and most Tomcat users will find they are not exposed.
axios 1.14.1 and 0.30.4: npm Hijack Drops North Korean RAT
axios is everywhere, but the bad versions lived only about three hours on March 31, 2026; if nothing resolved a fresh axios in that window you are fine, and if something did, that machine ran a remote-access trojan.
Trivy Supply-Chain Hijack: trivy-action Steals CI Secrets
If any pipeline ran trivy-action by tag, setup-trivy, or Trivy 0.69.4 to 0.69.6 during the March 19-23, 2026 windows, every secret that job could see is burned; if you pinned SHAs, digests or 0.69.3, you were fine.
Cisco FMC CVE-2026-20079: Exploited Pre-Auth Root Bypass
If you run an on-prem Cisco Secure FMC that is not on a September 2026 hardening release, upgrade now and check it for compromise; state and ransomware actors are using this bug to take root on the box that controls your firewalls.
Cisco SD-WAN CVE-2026-20127: CVSS 10 Bypass, ED 26-03
If you run on-prem Catalyst SD-WAN control components, upgrade and hunt now: a sophisticated actor has used this bypass for years, and the follow-on SD-WAN bugs CISA keeps adding to KEV show the platform is still being targeted.
FortiOS CVE-2025-68686: SSL-VPN Symlink Patch Bypass in KEV
This is not a way in, only a way to stay in on FortiGates that ran SSL-VPN and were already breached; the real problem is that FortiOS 7.2, 7.0 and 6.4 will never get a fix, so plan the move to 7.4.7+ or 7.6.2+.
Notepad++ Updater Hijack: State Actor Served Bad Updates
Targeting was narrow (about a dozen machines in Kaspersky's telemetry), but any fleet that auto-updated Notepad++ between June and December 2025 should update to v8.9.1+ and check the published IoCs.
OpenClaw CVE-2026-25253: One-Click RCE via Token Leak
Fixed since January, but any OpenClaw install that missed updates can be taken over by its owner clicking one link, and a loopback-only setup does not save it.
Ivanti EPMM Zero-Day RCE: CVE-2026-1281 and CVE-2026-1340
On-premises Ivanti EPMM was open to unauthenticated remote command execution, exploited before disclosure and with a public PoC a day later; patch, confirm the RPM survived any later upgrade, and hunt for compromise.
FortiCloud SSO Cross-Account Login: CVE-2026-24858
Any Fortinet device that relies on FortiCloud SSO needs the January 2026 builds (FortiCloud now refuses SSO from vulnerable versions anyway), and any device with SSO enabled before then should be checked for rogue admins.
Oracle HTTP Server CVE-2026-21962: CVSS 10 Flaw in KEV
If an Oracle HTTP Server, Apache or IIS front end with the WebLogic proxy plug-in still lacks the January 2026 CPU, patch it now; exploit code has been public since January and the bug is now confirmed exploited.
FortiOS CVE-2025-25249 and CVE-2025-61624 Now Exploited
If you run FortiGates, get to FortiOS 7.4.10+ or 7.6.5+ now and hunt for implants: one bug gives unauthenticated attackers code execution over CAPWAP and is being exploited at scale, and the other turns stolen admin logins into root implants.
Ni8mare: n8n Unauthenticated Takeover, Plus a KEV RCE
If you self-host n8n and anything about it is reachable from the internet, upgrade today: one bug lets strangers in through public forms, and its companion RCE is on CISA's exploited list.
2025
LangGrinch: LangChain Core Serialization Injection
A real design flaw in a library almost every Python agent stack pulls in, but it needs a serialize-then-deserialize path over attacker-influenced data; bump langchain-core in your next routine dependency update.
MongoBleed: Pre-Auth Memory Leak in MongoDB Server
Atlas users are already patched; self-hosted MongoDB that untrusted networks can reach must be upgraded (or have zlib disabled) now, and internet-exposed instances should rotate credentials.
FortiCloud SSO SAML Bypass: CVE-2025-59718/59719
If any Fortinet device has FortiCloud SSO admin login turned on, it was open to unauthenticated admin takeover; upgrade, then also apply the January 2026 fix for CVE-2026-24858, which bypassed this patch.
React2Shell: Unauthenticated RCE in React Server Components
If any server you run renders React Server Components and was not patched in December 2025, treat it as compromised until shown otherwise: patch, redeploy, and rotate its secrets.
Ray CVE-2025-62593: Browser-Driven RCE Against Ray Devs
Upgrade Ray to 2.52.0 or later on developer machines and internal clusters this week; the attack needs a Firefox or Safari user to load a hostile page while a pre-2.52 dashboard is running, and the public evidence of real-world use is thin.
Shai-Hulud 2.0: npm Worm Hits PostHog, Zapier, Postman
The worm is long dead on npm, but any machine or CI runner that installed a trojanized version between Nov 21 and Nov 27, 2025 should be treated as having leaked every secret it could reach.
FortiWeb CVE-2025-64446: Exploited Unauthenticated Takeover
Any FortiWeb still below the fixed builds with its web GUI reachable from the internet should be presumed compromised and rebuilt, not just patched.
runc Container Escapes: Three Mount-Race CVEs Fixed
Not remotely exploitable and not seen in attacks, but anyone who runs or builds images they do not fully trust (CI runners, multi-tenant clusters) should roll out patched runc this week.
Microsoft WSUS CVE-2025-59287: Unauthenticated SYSTEM RCE
Only servers with the WSUS role are at risk, but on those it is unauthenticated SYSTEM code execution: patch them now, and treat any WSUS server exposed on 8530/8531 to the internet as a likely incident.
GlassWorm: Invisible-Unicode Malware in Open VSX Extensions
This is a recurring campaign rather than a single event; developers on VS Code forks that pull from Open VSX should audit installed extensions and auto-updates, while most stock VS Code users with mainstream extensions were not affected.
F5 Breach: Nation-State Stole BIG-IP Source Code
The breach itself needs no new action a year on, but its aftermath does: two unauthenticated BIG-IP APM RCEs are now on CISA's exploited list, so every BIG-IP owner should be on current fixed builds with management interfaces off the internet.
Oracle EBS CVE-2025-61882: Cl0p Zero-Day Data Theft
Any internet-reachable Oracle EBS 12.2.x server that missed the October 2025 alerts should be treated as compromised until a hunt proves otherwise.
RediShell: 13-Year-Old Lua Use-After-Free RCE in Redis
Exploitation needs an authenticated session, so properly locked-down Redis can be patched in a normal urgent window; instances reachable without a password are effectively unauthenticated RCE and should be fixed today.
Cisco ASA/FTD VPN Zero-Days Tied to ArcaneDoor
Still live in October 2026: the actor added a persistence mechanism in April 2026 that survives the September 2025 fixes, so ASA/FTD owners with VPN web services need the latest updates and a physical power cycle, not just last year's patch.
Shai-Hulud: Self-Replicating Worm Hits 500+ npm Packages
The worm's packages were removed in September 2025, but every machine that installed one handed over its npm, GitHub and cloud credentials, so the open question is whether you rotated them and removed the backdoor workflow.
chalk, debug and 16+ npm Packages Hijacked via Phishing
Despite billions of weekly downloads, the bad versions were live for about two hours and the payload only swapped crypto addresses inside browsers, so most teams just need to confirm no lockfile or bundle captured them.
Nx s1ngularity: Malicious npm Releases Hijack AI CLIs
The packages were live for about four hours in August 2025, but anything they stole (GitHub and npm tokens, SSH keys, .env files, wallets) stays useful until rotated, so confirm you were not hit rather than assume.
Salesloft Drift OAuth Token Theft Hits Salesforce Orgs
Contained since September 2025, but if your org ever connected Drift, verify that every token and every secret sitting in your CRM or support cases was rotated, because the theft was aimed at exactly those secrets.
GitHub Copilot "YOLO Mode" Prompt Injection RCE
Patched in August 2025 and not known to be exploited, but enterprise Visual Studio installs lag and the autoApprove setting can still be turned on by hand, so verify both.
WinRAR CVE-2025-8088: ADS Path Traversal Exploited by RomCom
Fixed since July 2025 but still heavily exploited, and WinRAR does not update itself, so hunt down every copy at 7.12 or older and update it today.
Exchange Hybrid CVE-2025-53786: On-Prem to Cloud Escalation
Not known to be exploited and requires on-prem Exchange admin first, but it turns any on-prem compromise into a quiet cloud takeover, so verify the dedicated hybrid app is in place and the old shared credential is gone.
Cursor CurXecute: Prompt Injection to RCE via mcp.json
Cursor auto-updates and both bugs were fixed by mid-2025; the lasting takeaway is to treat any agent that can write its own tool config as a code-execution path.
Amazon Q VS Code Extension 1.84.0 Shipped a Wiper Prompt
A real supply-chain compromise with a payload that AWS says could not run; if nothing in your fleet still has 1.84.0, there is nothing left to do.
ToolShell: SharePoint On-Prem Unauthenticated RCE Chain
Fixes shipped in July 2025, but ToolShell stole ASP.NET machine keys that survive patching, so any on-prem SharePoint that was internet-facing then needs proof that keys were rotated and no backdoor remains.
mcp-remote: OS Command Injection via OAuth Endpoint
The fix is more than a year old, but version-pinned MCP client configs and stale npx caches can keep a vulnerable mcp-remote alive, so confirm the version and move on.
sudo --chroot Local Root Escalation (CVE-2025-32463)
Distros patched this in mid-2025 and it is now known-exploited; any multi-user or shared Linux host still on sudo 1.9.14-1.9.17 without the vendor fix hands root to every local account.
Citrix Bleed 2: NetScaler Gateway Memory Leak
A pre-auth memory leak on internet-facing VPN gateways that was exploited within weeks; patched since June 2025, so the job now is proving you patched, killed sessions and were not session-hijacked.
MCP Inspector: Unauthenticated RCE via Browser CSRF
Fixed since June 2025, but Inspector sits in project devDependencies and npx caches, so old copies survive; confirm 0.14.1+ and never run it with auth disabled.
EchoLeak: Zero-Click Data Leak in Microsoft 365 Copilot
Nothing to patch: Microsoft fixed it in its cloud service before disclosure and saw no exploitation, but it is the reference case for why AI assistants that read untrusted content need guardrails.
SAP NetWeaver Visual Composer: Unauthenticated Upload RCE
Patches have existed since April and May 2025, but this was a mass-exploited zero-day used by ransomware crews, so every SAP Java shop should confirm the fix and hunt for leftover webshells.
Erlang/OTP SSH: Unauthenticated RCE (CVE-2025-32433)
The OTP fix is 18 months old, but the bug hides inside appliances and OT gear that patch slowly; inventory anything exposing an Erlang SSH daemon rather than assuming your servers' OpenSSH covers you.
Langflow Unauthenticated Code Execution (CVE-2025-3248)
Fixed in March 2025 and exploited in the wild since; if any Langflow below 1.3.0 is reachable from the internet, treat it as compromised, not merely unpatched.
Chrome CVE-2025-2783: Mojo Sandbox Escape Zero-Day
A real zero-day used for espionage in early 2025, long since fixed by Chrome's automatic updates; the lasting lesson is to make sure auto-update actually works on your fleet.
IngressNightmare: ingress-nginx Cluster Takeover RCE
Patched since March 2025. If any cluster still runs ingress-nginx below 1.11.5 or 1.12.1, that is a cluster-takeover risk, and the controller itself is now retired, so plan the migration while you check.
CrushFTP Auth Bypass CVE-2025-31161 Exploited in the Wild
Fixed since March 2025 and widely exploited from early April; if you run CrushFTP, make sure you are on a current build (later CrushFTP flaws raised the minimum) and audit for backdoor admin accounts.
Next.js Middleware Authorization Bypass (CVE-2025-29927)
Patched since March 2025 and easy to fix; if you self-host Next.js and lean on middleware for auth, confirm you are on a fixed release and that the header is stripped at your edge.
tj-actions/changed-files: GitHub Action Leaked CI Secrets
The malicious tags were cleaned up within about a day in March 2025; today the job is confirming you rotated any secret that a March 14-15, 2025 workflow run could have printed, and that you pin Actions by SHA.
Apache Tomcat Partial PUT RCE (CVE-2025-24813)
It is in KEV and attacks were seen within days, but exploitation needs the default servlet's write support turned on, which is off by default and rare; upgrade on your normal cycle and check that one setting.
rsync: Six Flaws Incl. Daemon Heap Overflow (CVE-2024-12084)
Distros shipped fixes in January 2025 and there is no known exploitation, but internet-facing rsync daemons have since needed two more security releases, so verify you run a current rsync rather than just 3.4.0.
FortiOS 7.0 Websocket Auth Bypass to Super-Admin
Exploited as a zero-day in late 2024 and patched in January 2025; anyone whose FortiOS 7.0 admin interface was internet-facing back then should audit admin and VPN accounts, not just the firmware version.
Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282)
A real zero-day used for espionage and patched in January 2025; if you ran Connect Secure below 22.7R2.5 last winter, a clean patch level today does not prove you were never backdoored.
2024
Ultralytics PyPI Releases Shipped a Crypto Miner
The four bad versions were pulled from PyPI within hours to about half a day in December 2024 and carried a coin miner, not a credential stealer; unless something still pins one of them, there is nothing to do but learn the CI lessons.
PAN-OS Management Auth Bypass Chain (Lunar Peek)
Exploited at scale in late 2024 and patched for almost two years; if your management interface was ever internet-reachable, verify the fix and hunt for leftovers rather than assume you are clean.
CUPS cups-browsed RCE Chain: Real, but Needs a Print Job
Not the internet-ending bug the pre-disclosure hype suggested: code runs only when someone prints to the rogue printer, as the unprivileged lp user; but nothing should expose UDP 631 to the internet, and exposed hosts can be abused for DDoS.
Veeam Backup & Replication RCE (CVE-2024-40711)
Ransomware crews have used this to take over backup servers; any Veeam Backup & Replication v12 server below 12.2 is an emergency, and backup servers should never be reachable from user or internet networks.
Windows TCP/IP IPv6 Remote Code Execution (CVE-2024-38063)
Serious on paper and worth patching promptly, but there is no known in-the-wild exploitation, public code is a flaky crash-oriented proof of concept, and any machine on August 2024 or later cumulative updates is already fixed.
Apache OFBiz: Unauthenticated RCE (CVE-2024-38856)
Any internet-reachable OFBiz older than 18.12.16 should be treated as compromised-until-proven-otherwise and upgraded immediately; this bug class has been exploited repeatedly.
regreSSHion: OpenSSH sshd Signal Race RCE (CVE-2024-6387)
Serious on paper (unauthenticated root RCE in sshd), but the only demonstrated exploit needed a 32-bit glibc target and 6-8 hours of continuous connections in a lab, so patch promptly through your distro instead of panicking.
MOVEit Transfer: SFTP Authentication Bypass (CVE-2024-5806)
If you run MOVEit Transfer with SFTP exposed and are not on a fixed build, treat it as urgent: exploit details went public on disclosure day and attempts followed within hours.
polyfill.io CDN Supply-Chain Compromise Hits 100K+ Sites
The malicious domain has been suspended since June 27, 2024, but any page that still loads a script from polyfill.io or its sister domains is trusting an attacker-linked host and should be cleaned up.
Probllama: Ollama Path Traversal to RCE (CVE-2024-37032)
The bug was fixed in May 2024, so anything current is patched; the lasting risk is Ollama servers left reachable from the internet with no authentication, which is still very common.
CVE-2024-4577: PHP-CGI Argument Injection RCE on Windows
If you run PHP on Windows behind Apache in CGI mode (including any default XAMPP install), treat it as compromised-until-proven-otherwise and patch or remove CGI today; everyone else can relax.
Snowflake UNC5537: Customer Accounts Hit With Stolen Logins
There was no Snowflake bug to patch; the lesson is that any cloud data platform reachable with a password alone will eventually be logged into by someone holding an infostealer log.
PAN-OS GlobalProtect Zero-Day RCE (CVE-2024-3400)
Any PAN-OS 10.2, 11.0 or 11.1 firewall with a GlobalProtect gateway or portal that is not on a fixed hotfix is exposed to unauthenticated root code execution and should be patched and checked immediately.
xz-utils Backdoor in liblzma 5.6.0/5.6.1 (CVE-2024-3094)
The backdoor only reached rolling and pre-release distributions for a few weeks before discovery; stable enterprise releases never shipped it, but any machine that ran xz 5.6.0 or 5.6.1 should be checked.
ShadowRay: Exposed Ray Clusters Hijacked (CVE-2023-48022)
There is no patch to install: if any Ray dashboard, Jobs or Client port is reachable from an untrusted network, anyone who can reach it can run code on your cluster.
Malicious Hugging Face Models: Pickle Code Execution
This is a standing risk, not a one-off bug: loading a pickle-based model from an untrusted repo is running that author's code, so check how your pipelines load third-party weights.
ScreenConnect Auth Bypass CVE-2024-1709 (CVSS 10)
Any on-premises ScreenConnect server still below 23.9.8 should be treated as compromised until proven otherwise; cloud-hosted customers were patched by ConnectWise.
FortiOS SSL VPN Pre-Auth RCE (CVE-2024-21762)
Any FortiGate or FortiProxy with SSL VPN enabled on an unfixed build is exposed to unauthenticated remote code execution that has been exploited; upgrade or disable SSL VPN today.
Leaky Vessels: runc Container Escape (CVE-2024-21626)
A real container escape, but it needs you to run an attacker-controlled image or a crafted exec; patch runc everywhere promptly, urgently where untrusted images or multi-tenant builds run.
Jenkins CLI Arbitrary File Read (CVE-2024-23897)
An unpatched Jenkins controller reachable by untrusted users leaks files and secrets that can lead to full takeover; upgrade now or disable the CLI.
GitLab Password Reset Flaw Enables Account Takeover
Any self-managed GitLab still on 16.1 through 16.7.1 lets anyone take over accounts without 2FA by email alone; upgrade immediately and turn on 2FA.
Ivanti Connect Secure Zero-Day Chain: Unauthenticated RCE
This chain was exploited as a zero-day by a suspected nation-state actor and then mass-exploited; any unpatched appliance should be assumed compromised, not just patched.
2023
Confluence CVE-2023-22518: Unauthenticated Reset to Admin
Any self-hosted Confluence that is reachable from the internet and not on a fixed release can be wiped and taken over by an unauthenticated request; patch or pull it offline, and Atlassian Cloud users have nothing to do.
Cisco IOS XE Web UI Zero-Day Chain Implants Devices
If any IOS XE device has its HTTP or HTTPS server reachable from an untrusted network and is not on a fixed release, treat it as compromised until proven otherwise; devices with the web UI disabled were never exposed.
curl SOCKS5 Heap Overflow: Hyped, but Narrow in Practice
Pre-announced as the worst curl flaw in a long time, the bug only bites when libcurl uses a SOCKS5 proxy with remote name resolution and an attacker can supply a very long hostname; take 8.4.0 or later in normal patching, and hurry only if that proxy setup applies to you.
Citrix Bleed: NetScaler Gateway Leaks Session Tokens
If a NetScaler configured as a Gateway or AAA server is still on a vulnerable build, assume it is being probed and patch, kill every session, and hunt; patching alone does not evict an attacker holding a stolen session.
HTTP/2 Rapid Reset: Record DDoS Flaw in HTTP/2 Servers
This is availability-only and was exploited at record scale, but if your HTTP/2 traffic terminates at a major CDN or cloud load balancer the provider already absorbed it; check what terminates HTTP/2 on your own servers.
LangChain PALChain: Prompt Injection to RCE (CVE-2023-44467)
Only apps that feed untrusted text into PALChain (or similar LLM-to-Python chains) are at risk, but for them it is full code execution, and blocklist fixes kept getting bypassed, so remove the pattern rather than trust the patch.
KNX CVE-2023-4346: Building Automation BCU Key Lockout
Only buildings with KNX devices that have no BCU key set and a network path to the KNX bus are at risk, but there is no patch and a lockout can mean physically replacing devices.
Strapi CVE-2023-22894: 2023 Password-Hash Leak Now in KEV
Only Strapi builds older than 4.8.0 (March 2023) are affected, but on those an unauthenticated attacker can take over the super admin, so any you find should be upgraded or taken offline today.
2021
AjaxPro CVE-2021-23758: Old ASP.NET RCE Now in CISA KEV
If an ASP.NET app you run still ships AjaxPro, treat it as an unauthenticated RCE and upgrade or remove the library now; if you never used AjaxPro, there is nothing to do.
DD-WRT CVE-2021-27137: UPnP Overflow Used by C0XMO Botnet
Only routers running an old DD-WRT build with UPnP turned on are at risk; find any you own, update or retire them, and switch UPnP off where nobody needs it.
ONLYOFFICE Docs CVE-2021-3199: Old Upload RCE Now in KEV
Only Document Server installs older than 5.6.3, a release from August 2020, are at risk, but any you find should be treated as exposed and upgraded or pulled offline today.
2019
SQL Server CVE-2019-1068: 2019 RCE Added to CISA KEV
Any SQL Server 2014, 2016 or 2017 instance updated since July 2019 already has the fix; the real work is finding the instances that never got it, now that CISA says attackers are exploiting the bug, and patching or retiring them.
2016
Apache Struts S2-032 (CVE-2016-3081): 2016 RCE Now in KEV
Only Struts 2.3.20 to 2.3.28 apps with Dynamic Method Invocation turned on are exposed, but any Struts 2.3.x you find is end-of-life, open to worse KEV-listed bugs, and should be fixed or pulled now.
2015
ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug Now in KEV
This is a ten-year-old local root bug that any RHEL 7 or CentOS 7 host updated since late 2015 already has fixed; the KEV listing matters only for forgotten, never-patched machines, and those have bigger problems.
BIND CVE-2015-5477: 2015 TKEY DNS Crash Bug Now in KEV
Any BIND release from the past decade is fixed, so most teams have nothing to do; the real risk is forgotten DNS servers and appliances still running pre-mid-2015 BIND, which one packet can knock offline.
libuser CVE-2015-3246: 2015 Linux Root Bug Lands in KEV
Any RHEL or CentOS 6 or 7 host that has taken updates since July 2015 is already fixed; the real risk is forgotten legacy Linux servers, where this is one of several old root exploits attackers now chain after a web compromise.