Vulnerability digest for 2026-W44
10 vulnerabilities added to CISA KEV and 127 new critical CVEs, 2026-10-26 to 2026-11-01.
- 10.0CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityExploitedFix availableGitLab Community Edition and Enterprise Edition
1 min read - 9.3CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityRCEExploitedVerify fixAdobe Commerce and Magento
1 min read - 9.2CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityExploitedFix availableGoogle Brotli
1 min read - 9.2CVE-2026-109619PHP Stale Internal Request-State VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 9.2CVE-2026-109618PHP Memory Corruption VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 8.6CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityExploitedVerify fixCisco Secure Firewall ASA Software and Cisco Secure FTD Software
1 min read - 7.8CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 7.0CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 4.3CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 2.7CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityExploitedFix availableBroadcom VMware ESX
1 min read
- 9.1CVE-2026-120229WAVLINK WN553X1-B ioos sub_416B50 os command injectionVerify fixWAVLINK WN553X1-B
1 min read - 9.1CVE-2026-116505TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectionVerify fixTOTOLINK A950RG
1 min read - 9.8CVE-2026-116485danmu_api before 1.21.7 Authentication Bypass via Default Token in Env EndpointsFix availablehuangxd- danmu_api
1 min read - 9.9CVE-2026-120227WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injectionVerify fixWAVLINK WN701AE
1 min read - 9.4CVE-2026-120230WAVLINK WN701AE ioos Web Backend del_vlan_group os command injectionRCEVerify fixWAVLINK WN701AE
1 min read - 10.0CVE-2026-120195WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injectionVerify fixWAVLINK WL-WN579A3-A
1 min read - 10.0CVE-2026-120198WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injectionVerify fixWAVLINK WL-WN530BE1-A
1 min read - 9.9CVE-2026-116506TOTOLINK A950RG firewall.so apmib_set command injectionVerify fixTOTOLINK A950RG
1 min read - 9.9CVE-2026-120240WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injectionVerify fixWAVLINK WN553X1-B
1 min read - 9.9CVE-2026-120197WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injectionVerify fixWAVLINK WL-WN530HG4B
1 min read - 9.4CVE-2026-120239WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.4CVE-2026-120238WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.4CVE-2026-120231WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 9.4CVE-2026-120196WAVLINK WN579X3-D wapi.cgi port_forward os command injectionRCEVerify fixWAVLINK WN579X3-D
1 min read - 9.4CVE-2026-120228WAVLINK WN553X1-B ioos Service sub_416D88 os command injectionRCEVerify fixWAVLINK WN553X1-B
1 min read - 10.0CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowVerify fixD-Link DIR-505
1 min read - 9.1CVE-2026-112352Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user Fix availableSunhillo Sureline
1 min read - 9.9CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)RCEVerify fixAdobe Adobe Campaign Classic
1 min read - 9.8CVE-2026-119706LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle DeserializationRCEFix availableInternLM lmdeploy
1 min read - 9.8CVE-2026-112346OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCERCEFix availableOpenHands OpenHands Software Agent SDK
1 min read - 9.9CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionFix availablewasmtime
1 min read - 9.9CVE-2026-107328IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in RCEFix availableLangflow Langflow
1 min read - 9.9CVE-2026-107329IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generationRCEFix availableLangflow Langflow
1 min read - 9.1CVE-2026-51863DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129).Verify fixUnknown product
1 min read - 9.1CVE-2026-103882Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' ParameterRCEVerify fixacadlix Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress
1 min read
- FBI Blames North Korea for Crypto Theft on BinanceSecurity Affairs
- Alpine Linux rebuilds GitLab server following security incidentBleepingComputer
- Malicious code on Polymarket reportedly diverts 2.7 million dollars from tradersThe Hacker News
- FBI Links TraderTraitor to Record Binance Crypto HeistThe Hacker News
- Northflank security breach leads to abuse of customers' AI API keysBleepingComputer
- Attackers Exploit Critical Drupal Commerce Core VulnerabilitySecurity Affairs
- China-backed threat group used agentic AI pentesting tool to compromise targetsCyberScoop
- Fashion retailer Resolve says hackers stole payment card informationThe Record
- $6.3 Billion Stolen from Binance in Attack Attributed to North KoreaSecurity Affairs
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideThe Hacker News
- Florida warns that 4.9 million people had Social Security numbers leakedThe Record
- Defense contractor pleads guilty in North Korean worker schemeCyberScoop
- Reports highlight multiple breaches, firmware flaws and AI malwareSecurityWeek
- Syrian Electronic Army hacker gets prison time in federal courtThe Record
- Binance Links Crypto Theft to Compromised DevOps LaptopBleepingComputer
- Analysts Link Binance Theft to North Korean HackersSecurityWeek
- Polymarket halts trading after cryptocurrency draining script breachBleepingComputer
- Leaked DHS Employee Archive Faces Challenges to Stay OnlineCyberScoop
- Student SSNs and Medicaid IDs Exposed in Frontline School Software BreachDataBreaches.net
- China-Linked Hackers Exploited VMware ESX Zero-DayThe Hacker News
- Attackers Exploit PHP2Shell Flaws in Palo Alto Networks InterfacesThe Hacker News
- Researchers Uncover Covert and Ephemeral Network Used by Volt TyphoonCyberScoop
- Hackers Probe Critical Oracle E-Business Suite FlawThe Hacker News
- Adobe Commerce and Brotli Vulnerabilities Added to KEV CatalogThe Hacker News
- External Teams Chats Anchor 15-Minute Malware DeliveryDark Reading
- Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyThe Hacker News