IncidentsExploitedCVE-2026-109618CVSS 9.25 min read
Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.
VulnerabilitiesCVE-2026-125881CVSS 9.34 min read
N-able says every unauthenticated flaw in the Able2Shell dump is fixed in N-central 2026.4 HF2, and that it has seen scanning but no compromise of hosted servers. The authenticated bugs are still open.
VulnerabilitiesCVE-2026-119618CVSS 8.14 min read
Apache HTTP Server 2.4.71 fixes a race condition in mod_http2 that Red Hat scored 9.8, reported independently by Anthropic's OSS Scanner and Google researchers. Only servers with HTTP/2 enabled are affected.
VulnerabilitiesExploitedCVE-2026-18577CVSS 8.24 min read
The vendor shut its hosted environments on November 9 and told on-premises customers to do the same, while it works on a hotfix. It says it hasn't seen exploitation in the wild.
VulnerabilitiesCVE-2026-125883CVSS 9.34 min read
N-able released N-central 2026.4 HF2 for seven flaws disclosed publicly on November 8, after taking hosted environments offline and telling on-premises customers to do the same.
VulnerabilitiesCVE-2026-120017CVSS 10.04 min read
SAP published 42 new and updated notes, nine of them critical. Two of the maximum-severity bugs sit in the kernel, which means the affected release list runs past the versions still in maintenance.
VulnerabilitiesAnalysis3 min read
An independent researcher published details and proof-of-concept code for 33 issues in the RMM platform. N-able says it has seen scanning but no successful exploitation, and has no hotfix out yet.
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.01 min read
Rapid7's weekly wrapup lists a new module for the unauthenticated NetScaler bug that Citrix said was exploited before disclosure, alongside modules for Cisco Secure Email Gateway and GitLab.
VulnerabilitiesCVE-2026-83844CVSS 7.02 min read
The patched Paint build is 11.2609.401.0, and machines that only take Windows updates won't get it.
Threat intelExploitedCVE-2026-111497CVSS 9.21 min read
Check Point Research says the Brotli decompression bug, first tied to Node.js, may also reach Python packages, .NET and proxies, and that scanning and exploitation attempts are already showing up.
VulnerabilitiesCVE-2026-110186CVSS 9.81 min read
IBM lists multiple Langflow vulnerabilities with different authentication requirements; operators should review the affected releases and remediation.
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.02 min read
The critical GitLab CE/EE bug lets an unauthenticated user run code on the server through a crafted regular expression in a CI/CD configuration. Federal agencies face a November 1 remediation deadline.
