🟠 CVE-2026-111399 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-111399/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

Vulnerability Watch, October 16, 2026: 12 critical CVEs and 88 new vendor and CERT advisories

12 critical CVEs · 88 advisories · NIST NVD, CERTs & vendors

#cybersecurity #vulnerability

F5 & Juniper Networks address CRITICAL RCE bugs in NGINX, Junos OS & more. No active exploitation yet — patch immediately to prevent device takeover. Details: https://radar.offseq.com/threat/f5-juniper-networks-patch-critical-vulnerabilities-85280fb8b973d5ad #OffSeq #vulnerability #patchnow

Malware evasion made easier with AI — but behavior still gives it away

www.csoonline.com/article/4235...

#Cybersecurity #ThreatIntel #Vulnerability

Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say

www.csoonline.com/article/4236...

#Cybersecurity #ThreatIntel #Vulnerability

BAE Systems cyberattack disrupts US federal court operations

www.bleepingcomputer.com/news/securit...

#Cybersecurity #ThreatIntel #Vulnerability

Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

#BeyondTrust #CVE2026102764 #ZeroDay #ArmoryCastle #Mandiant #Cybersecurity #Vulnerability #InfoSec

China-linked threat group Armory Castle targeted BeyondTrust Remote Support via a previously unknown flaw, deploying web shells and harvesting c…

https://en.hacks.gr/omada-chaker-poy-syndeetai-me-tin-kina-ekmetalleytike-provlima-toy-beyondtrust-se-mia-syskeyi/

#BeyondTrust #Vulnerability #Security

Hackers Exploit Palo Alto PAN-OS Zero-Day to Execute Remote Code With Root Privileges https://redoracle.com/News/hackers-exploit-palo-alto-pan-os-zero-day-to-execute-remote-code-with.html #code #vulnerability #remote

Critical GitLab RCE (CVE-2026-97229): public PoC live, versions before 19.2.8/19.3.5/19.4.2 vulnerable. #GitLab #RCE #Security #CVE2026 #CI_CD #Vulnerability #PatchNow https://thedailytechfeed.com/critical-gitlab-rce-cve-2026-97229-poc-released-patch-urgently-needed/

Critical Acrobat flaw lets malicious PDFs corrupt memory with one click—update now to avoid CVE-2026-81983 risk. #Cybersecurity #Adobe #Acrobat #Vulnerability #MemoryCorruption #PatchNow https://thedailytechfeed.com/one-click-acrobat-bug-lets-malicious-pdfs-corrupt-memory/

🟠 CVE-2026-111282 - High (8.2)

Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTrans...

https://www.thehackerwire.com/vulnerability/CVE-2026-111282/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-111281 - Critical (9.8)

Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code executi...

https://www.thehackerwire.com/vulnerability/CVE-2026-111281/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75941 - High (8)

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusi...

https://www.thehackerwire.com/vulnerability/CVE-2026-75941/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

coleam00 Archon 0.2.13 – 0.11.1: CRITICAL auth bypass on /api/* enables remote code execution. Restrict API access ASAP & check vendor for fixes. https://radar.offseq.com/threat/cve-2026-111322-missing-authentication-for-critical-function-in-coleam00-archon-2baeaa2e1000cf2d #OffSeq #Vulnerability...

Review the Mitsubishi Electric security advisory fixing critical ICONICS Suite vulnerabilities, including CVE-2026-16438 and CVE-2026-16436.

#MitsubishiElectric #ICONICS #GENESIS64 #ICS #OTSecurity #Cybersecurity #Vulnerability #InfoSec

Review the Progress security bulletin fixing 12 MOVEit Transfer vulnerabilities, including high-severity flaws CVE-2026-87093 and CVE-2026-89067.

#MOVEitTransfer #ProgressSoftware #MFT #Cybersecurity #Vulnerability #InfoSec

Update the Backuply WordPress plugin to 1.5.9 to fix CVE-2026-93953, a high-severity SQL injection vulnerability impacting 600,000 sites.

#WordPress #Backuply #SQLInjection #Wordfence #Cybersecurity #Vulnerability #InfoSec

Upgrade your DB cluster to fix CVE-2026-110812, a critical 9.9 CVSS Amazon Neptune vulnerability in Apache TinkerPop Gremlin.

#AWS #AmazonNeptune #ApacheTinkerPop #CloudSecurity #Cybersecurity #Vulnerability #InfoSec

🟠 CVE-2026-111279 - High (7.5)

Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthe...

https://www.thehackerwire.com/vulnerability/CVE-2026-111279/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack