Bulletin ID: 2026-152-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/27/2026 11:00 AM PDT Description: The AWS API MCP…
Tag: Vulnerability
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library
Read this article
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
A vulnerability in Brotli, Google’s widely used open-source compression library, is putting a broad range of software at risk. About CVE-2026-111497…
CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection
Read this article
CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
Read this article
CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT Summary: AWS identified…
CVE-2026-18061 – XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Read this article
CVE-2026-89090 – Denial of service in the event stream header decoder in AWS SDK for Go v2
Read this article
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day…
Why Vulnerability Management Fails Without Reliable Asset Data
Vulnerability management depends on knowing what needs protecting. Asset management provides that foundation by maintaining a current picture of IT…
Cloud isolation bypass via Kubernetes vulnerability chain
Security researchers have disclosed a critical vulnerability chain in a major cloud provider’s managed Kubernetes service that enabled complete bypass of…
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
A Kaspersky expert presents a cloud isolation bypass case honored at Russian Pentest Award 2026. Learn how vulnerabilities in Kubernetes, Konnectivity,…
Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique,…
Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones
Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted attacks. Released on…
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions…
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated”…
Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics
Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected to…
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.