| unknown |
Advantech and DEKRA target industrial cybersecurity gaps as EU Cyber Resilience Act implementation advances |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
H₂O Retailing deploys Tenable One to unify cyber exposure management across multi-cloud infrastructure |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Quarantined, but still on your calendar: The explosion of invite-based attacks |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-14933 — Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.… |
vulnerability |
nvd |
CVE-2026-14933 |
|
2026-10-20 |
| medium |
CVE-2026-113583 — Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allo… |
vulnerability |
nvd |
CVE-2026-113583 |
|
2026-10-20 |
| medium |
CVE-2026-113496 — A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings,… |
vulnerability |
nvd |
CVE-2026-113496 |
|
2026-10-20 |
| medium |
CVE-2026-113495 — A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens a… |
vulnerability |
nvd |
CVE-2026-113495 |
|
2026-10-20 |
| critical |
CVE-2026-113389 — A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerabil… |
vulnerability |
nvd |
CVE-2026-113389 |
|
2026-10-20 |
| medium |
CVE-2026-113388 — A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the fu… |
vulnerability |
nvd |
CVE-2026-113388 |
|
2026-10-20 |
| medium |
CVE-2026-113385 — A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affe… |
vulnerability |
nvd |
CVE-2026-113385 |
|
2026-10-20 |
| high |
CVE-2026-105949 — Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs… |
vulnerability |
nvd |
CVE-2026-105949 |
|
2026-10-20 |
| critical |
CVE-2026-105312 — A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.s… |
vulnerability |
nvd |
CVE-2026-105312 |
|
2026-10-20 |
| high |
CVE-2026-105311 — The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to cr… |
vulnerability |
nvd |
CVE-2026-105311 |
|
2026-10-20 |
| unknown |
Windows Server 2025 gets support for quick machine recovery |
news |
general-news |
|
|
2026-10-20 |
| unknown |
What Security Teams Can Do To Tame Wild Code |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns |
news |
general-news |
|
|
2026-10-20 |
| unknown |
OVHcloud CLI releases backdoored on GitHub to steal developer secrets |
news |
general-news |
|
|
2026-10-20 |
| high |
Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries |
threat-intel |
otx |
f1cc91e7427a2202…, de063cf3f2e2a83e… |
nato, forest blizzard, apt28, naval shipbuilder, fancy bear, apt |
2026-10-20 |
| unknown |
Ahold Delhaize: Cyberattack affects services across US and Europe |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-9589 — Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu i… |
vulnerability |
nvd |
CVE-2026-9589 |
|
2026-10-20 |
| medium |
CVE-2026-113384 — A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of th… |
vulnerability |
nvd |
CVE-2026-113384 |
|
2026-10-20 |
| medium |
CVE-2026-113383 — A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the fi… |
vulnerability |
nvd |
CVE-2026-113383 |
|
2026-10-20 |
| medium |
CVE-2026-113382 — A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is… |
vulnerability |
nvd |
CVE-2026-113382 |
|
2026-10-20 |
| high |
CVE-2026-113358 — LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that… |
vulnerability |
nvd |
CVE-2026-113358 |
ransomware |
2026-10-20 |
| low |
CVE-2026-113357 — @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull reque… |
vulnerability |
nvd |
CVE-2026-113357 |
|
2026-10-20 |
| high |
CVE-2026-113356 — DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() t… |
vulnerability |
nvd |
CVE-2026-113356 |
|
2026-10-20 |
| medium |
CVE-2026-113355 — Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account admi… |
vulnerability |
nvd |
CVE-2026-113355 |
|
2026-10-20 |
| medium |
CVE-2026-113354 — Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users wit… |
vulnerability |
nvd |
CVE-2026-113354 |
|
2026-10-20 |
| medium |
CVE-2026-113353 — LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor,… |
vulnerability |
nvd |
CVE-2026-113353 |
|
2026-10-20 |
| high |
CVE-2026-113352 — uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitra… |
vulnerability |
nvd |
CVE-2026-113352 |
|
2026-10-20 |
| medium |
CVE-2026-113351 — libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zero… |
vulnerability |
nvd |
CVE-2026-113351 |
|
2026-10-20 |
| medium |
CVE-2026-113350 — react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers… |
vulnerability |
nvd |
CVE-2026-113350 |
|
2026-10-20 |
| medium |
CVE-2026-113349 — OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() a… |
vulnerability |
nvd |
CVE-2026-113349 |
|
2026-10-20 |
| medium |
CVE-2026-112787 — OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest()… |
vulnerability |
nvd |
CVE-2026-112787 |
|
2026-10-20 |
| medium |
CVE-2026-112786 — OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() t… |
vulnerability |
nvd |
CVE-2026-112786 |
|
2026-10-20 |
| medium |
CVE-2026-112785 — OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users t… |
vulnerability |
nvd |
CVE-2026-112785 |
|
2026-10-20 |
| medium |
CVE-2026-112784 — OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php… |
vulnerability |
nvd |
CVE-2026-112784 |
|
2026-10-20 |
| medium |
CVE-2026-112783 — OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and… |
vulnerability |
nvd |
CVE-2026-112783 |
|
2026-10-20 |
| unknown |
CVE-2026-108089 — ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control… |
vulnerability |
nvd |
CVE-2026-108089 |
|
2026-10-20 |
| unknown |
CVE-2026-108088 — ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apach… |
vulnerability |
nvd |
CVE-2026-108088 |
|
2026-10-20 |
| unknown |
CVE-2026-108087 — ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command (… |
vulnerability |
nvd |
CVE-2026-108087 |
|
2026-10-20 |
| unknown |
CVE-2026-108086 — ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML en… |
vulnerability |
nvd |
CVE-2026-108086 |
|
2026-10-20 |
| unknown |
CVE-2026-108062 — Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so o… |
vulnerability |
nvd |
CVE-2026-108062 |
|
2026-10-20 |
| unknown |
CVE-2026-107597 — PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an… |
vulnerability |
nvd |
CVE-2026-107597 |
|
2026-10-20 |
| critical |
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader |
news |
general-news |
|
apt |
2026-10-20 |
| unknown |
ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-85267 — A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Pl… |
vulnerability |
nvd |
CVE-2026-85267 |
|
2026-10-20 |
| unknown |
CVE-2026-43858 — A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve a… |
vulnerability |
nvd |
CVE-2026-43858 |
|
2026-10-20 |