| unknown |
CVE-2026-34484 — Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exist… |
vulnerability |
nvd |
CVE-2026-34484 |
|
2026-10-20 |
| critical |
CVE-2026-113620 — In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec an… |
vulnerability |
nvd |
CVE-2026-113620 |
|
2026-10-20 |
| high |
CVE-2026-113619 — In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that… |
vulnerability |
nvd |
CVE-2026-113619 |
|
2026-10-20 |
| medium |
CVE-2026-113470 — Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October whic… |
vulnerability |
nvd |
CVE-2026-113470 |
|
2026-10-20 |
| medium |
CVE-2026-113401 — Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and T… |
vulnerability |
nvd |
CVE-2026-113401 |
|
2026-10-20 |
| medium |
CVE-2026-113400 — Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 15… |
vulnerability |
nvd |
CVE-2026-113400 |
|
2026-10-20 |
| unknown |
CVE-2026-113399 — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1… |
vulnerability |
nvd |
CVE-2026-113399 |
|
2026-10-20 |
| high |
CVE-2026-113392 — A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unk… |
vulnerability |
nvd |
CVE-2026-113392 |
|
2026-10-20 |
| critical |
CVE-2026-113391 — A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function… |
vulnerability |
nvd |
CVE-2026-113391 |
|
2026-10-20 |
| critical |
CVE-2026-113390 — A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the func… |
vulnerability |
nvd |
CVE-2026-113390 |
|
2026-10-20 |
| high |
CVE-2026-105941 — The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserializ… |
vulnerability |
nvd |
CVE-2026-105941 |
ransomware |
2026-10-20 |
| unknown |
Ahold Delhaize Restoring Services Disrupted by Cyberattack |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election |
news |
general-news |
|
|
2026-10-20 |
| high |
AppGate gives OT supervisors live monitoring and session termination controls |
news |
general-news |
|
ics |
2026-10-20 |
| unknown |
Booz Allen warns frontier AI models can exploit OT pathways, manipulate controllers and move robotic equipment |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
Tactien Group launches CAST platform for independent counter-drone system testing at critical infrastructure sites |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| high |
ISA/IEC standards require integrated safety and cybersecurity for industrial control systems, OT-Knight’s Barreto Jijón says |
advisory |
vendor-blogs |
|
ics |
2026-10-20 |
| unknown |
Advantech and DEKRA target industrial cybersecurity gaps as EU Cyber Resilience Act implementation advances |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
H₂O Retailing deploys Tenable One to unify cyber exposure management across multi-cloud infrastructure |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Quarantined, but still on your calendar: The explosion of invite-based attacks |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-14933 — Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.… |
vulnerability |
nvd |
CVE-2026-14933 |
|
2026-10-20 |
| medium |
CVE-2026-113583 — Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allo… |
vulnerability |
nvd |
CVE-2026-113583 |
|
2026-10-20 |
| medium |
CVE-2026-113496 — A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings,… |
vulnerability |
nvd |
CVE-2026-113496 |
|
2026-10-20 |
| medium |
CVE-2026-113495 — A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens a… |
vulnerability |
nvd |
CVE-2026-113495 |
|
2026-10-20 |
| critical |
CVE-2026-113389 — A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerabil… |
vulnerability |
nvd |
CVE-2026-113389 |
|
2026-10-20 |
| medium |
CVE-2026-113388 — A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the fu… |
vulnerability |
nvd |
CVE-2026-113388 |
|
2026-10-20 |
| medium |
CVE-2026-113385 — A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affe… |
vulnerability |
nvd |
CVE-2026-113385 |
|
2026-10-20 |
| high |
CVE-2026-105949 — Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs… |
vulnerability |
nvd |
CVE-2026-105949 |
|
2026-10-20 |
| critical |
CVE-2026-105312 — A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.s… |
vulnerability |
nvd |
CVE-2026-105312 |
|
2026-10-20 |
| high |
CVE-2026-105311 — The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to cr… |
vulnerability |
nvd |
CVE-2026-105311 |
|
2026-10-20 |
| unknown |
Windows Server 2025 gets support for quick machine recovery |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CISA Adds Six Known Exploited Vulnerabilities to Catalog |
advisory |
cisa-advisories |
|
|
2026-10-20 |
| high |
Moxa AIG-302 ThingsPro Edge |
advisory |
cisa-advisories, vendor-blogs |
|
phishing, ics |
2026-10-20 |
| high |
HMS Networks PEAK-System PCAN Windows drivers |
advisory |
cisa-advisories, vendor-blogs |
|
phishing, ics |
2026-10-20 |
| high |
Hitachi Energy MicroSCADA X SYS600 Product |
advisory |
cisa-advisories, vendor-blogs |
|
ics |
2026-10-20 |
| critical |
Hitachi Energy RTU500 Product |
advisory |
cisa-advisories, vendor-blogs |
|
ransomware, ics |
2026-10-20 |
| critical |
#StopRansomware: SafePay Ransomware |
advisory |
cisa-advisories |
|
ransomware, phishing, botnet, ics |
2026-10-20 |
| unknown |
What Security Teams Can Do To Tame Wild Code |
news |
general-news |
|
|
2026-10-20 |
| unknown |
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns |
news |
general-news |
|
|
2026-10-20 |
| unknown |
OVHcloud CLI releases backdoored on GitHub to steal developer secrets |
news |
general-news |
|
|
2026-10-20 |
| high |
Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries |
threat-intel |
otx |
f1cc91e7427a2202…, de063cf3f2e2a83e… |
nato, forest blizzard, apt28, naval shipbuilder, fancy bear, apt |
2026-10-20 |
| unknown |
Ahold Delhaize: Cyberattack affects services across US and Europe |
news |
general-news |
|
|
2026-10-20 |
| unknown |
CVE-2026-9589 — Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu i… |
vulnerability |
nvd |
CVE-2026-9589 |
|
2026-10-20 |
| medium |
CVE-2026-113384 — A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of th… |
vulnerability |
nvd |
CVE-2026-113384 |
|
2026-10-20 |
| medium |
CVE-2026-113383 — A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the fi… |
vulnerability |
nvd |
CVE-2026-113383 |
|
2026-10-20 |
| medium |
CVE-2026-113382 — A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is… |
vulnerability |
nvd |
CVE-2026-113382 |
|
2026-10-20 |
| high |
CVE-2026-113358 — LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that… |
vulnerability |
nvd |
CVE-2026-113358 |
ransomware |
2026-10-20 |
| low |
CVE-2026-113357 — @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull reque… |
vulnerability |
nvd |
CVE-2026-113357 |
|
2026-10-20 |
| high |
CVE-2026-113356 — DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() t… |
vulnerability |
nvd |
CVE-2026-113356 |
|
2026-10-20 |