Author
Ostorlab Team
SMS of Death: Android Zero-Click Telephony DoS (CVE-2026-58882)
One malformed WAP Push SMS crashes Android telephony and drops calls with no tap from the victim; only Android 14 to 17 got the October fix.
Nov 02, 2026
TeamViewer RCE via Screen Size, Fixed in 15.83 (CVE-2026-111585)
A malicious TeamViewer host runs code on the viewer that connects to help it, through one truncat...
Nov 02, 2026
TightVNC Viewer Pre-Auth RCE, Fixed in 2.8.90
A malicious VNC server runs code on the TightVNC Viewer before any password prompt; upgrade the V...
Nov 02, 2026
EDK II PXE Driver RCE Before Secure Boot (CVE-2026-97631)
An oversized ICMP error message corrupts memory while a server PXE-boots, running attacker code b...
Nov 01, 2026
More by Ostorlab Team
LXD and Incus mTLS Authentication Bypass (CVE-2026-112816)
LXD and Incus mTLS authentication bypass lets network attackers impersonate trusted clients using public certificates. Check exposure and fixed versions.
Nov 01, 2026
CakePHP SQL Injection, Fixed in 5.4.4 (CVE-2026-119418)
CakePHP window offsets and collation names allow SQL injection when fed untrusted input. Check exposure and upgrade to 5.4.4, 5.3.8 or 5.2.16.
Nov 01, 2026
ChatGPT Shared-Link Account Takeover via MathLive Sandbox Escape
A shared ChatGPT link ran attacker JavaScript inside the victim session through MathLive unchecked messages; OpenAI fixed it on October 26.
Oct 31, 2026
GhostAction: Stolen GitHub Tokens Hit 23,000 Repos
Stolen GitHub tokens pushed 72,026 malicious commits to 22,964 repositories in nine days; revoke the tokens and hunt the #ghc2 cron job.
Oct 31, 2026
Ivanti Connect Secure Zero-Day Chain, Exploited (CVE-2026-104935)
A three-flaw chain gives unauthenticated root on Ivanti Connect Secure; upgrade to 22.8R2.6 or 25.1.1.3 and audit for October exploitation.
Oct 31, 2026
imgproxy ICO Loader RCE, Fixed in 4.0.16 (GHSA-hff9-5pqw-6w9f)
imgproxy 4.0.0 to 4.0.15 allocates ICO data with a wrapping size that unauthenticated crafted-image requests turn into heap corruption; fixed in 4.0.16.
Oct 31, 2026
October 2026 Update: Cloud Inventory, Scheduled Testing and Investigation Replay
The October 2026 update connects cloud inventory, schedules testing windows, replays investigations, and expands mobile scanning and fix verification.
Oct 31, 2026
pgAdmin 4 Import/Export RCE, Fixed in 9.19 (CVE-2026-116241)
pgAdmin 4 before 9.19 lets any Import/Export user run a psql TO PROGRAM command on the host, and lockout bypasses open admin guessing; fixed in 9.19.
Oct 31, 2026
WordPress Core Upgrade-Window RCE, Fixed in 7.1.4 (CVE-2026-119977)
WordPress 4.7 to 7.1.3 stages core updates in a predictable, web-served path that unauthenticated attackers race to execute code; fixed in 7.1.4.
Oct 31, 2026
Langflow Auto-Login Superuser Bypass, RCE via MCP (CVE-2026-93680)
Langflow OSS 1.0.0 to 1.12.8 hands any caller a superuser session that reaches RCE through its MCP tools; fixed in 1.13.0.
Oct 30, 2026