October 2026 Exploited Vulnerabilities: CISA KEV Patch Roundup
Exploited vulnerabilities October 2026: PAN-OS, Cisco email gateway, SonicWall SMA1000, SiteGuard, Siemens and Apple. Fixed versions and actions.
0 Comments
October 28, 2026
VeloCloud Vulnerability CVE-2026-114625 Exploited: Patch Now
Exploited VeloCloud vulnerability CVE-2026-114625 lets any VCO user become operator. Fixed versions, IOCs, log checks and a patch checklist.
October 26, 2026
Pillow Vulnerability CVE-2026-112900: EPS Flaw, Fix and Checks
Pillow vulnerability CVE-2026-112900 lets crafted EPS filenames inject Ghostscript options. Check your version, upgrade to 13.0.0 and lock down uploads.
October 26, 2026
Node.js October 2026 Security Release: Node2Shell and 9 More Fixes
The October 2026 Node.js security release fixes 10 flaws, including Node2Shell RCE. See the fixed versions and how to update servers and Docker images.
October 26, 2026
NGINX October 2026 Vulnerabilities: Check Your Config and Patch
Five NGINX vulnerabilities were fixed in 1.30.6 and 1.31.7. Learn which configs are at risk, how to audit yours with nginx -T and how to patch safely.
October 26, 2026
GitLab CVE-2026-110264: Patch Self-Managed GitLab Now
CVE-2026-110264 is a CVSS 10 GitLab flaw affecting every self-managed version since 7.0. Check your version, upgrade safely and spot attack attempts.
October 24, 2026
Nextcloud CVE-2026-110447: Built-in CODE Server Exploited
CVE-2026-110447 lets attackers plant web shells via Nextcloud's Built-in CODE Server app. Check your version, update or remove it, and hunt for compromise.
October 24, 2026
Plex2Shell: Plex Media Server Under Attack, Update Now
Plex2Shell lets attackers take over unpatched Plex Media Server installs without a login. Check your version, update and look for signs of malware.
October 24, 2026
“Black October” Fact-Check: What Really Happened in Cybersecurity (20–23 Oct 2026)
We fact-checked all 27 incidents in the viral "Black October" list: PHP2Shell, eMudhra, SBI, GitLab, LiteLLM, UpdraftPlus and more. What is real, what is exaggerated, and what Indian organisations should patch now.
October 23, 2026
How to Check and Patch PHP2Shell on Linux Servers (Ubuntu, Debian, RHEL, Docker)
A step-by-step guide to finding every PHP install on your Linux server, patching PHP2Shell (CVE-2026-109618/109619), verifying the fix and checking for signs of compromise.
October 22, 2026