Author
Ostorlab Team
Drupal Commerce Access Bypass, Exploited in the Wild (CVE-2026-118539)
Drupal Commerce before 2.41 and 3.3.13 lets limited users take over other vendors' variations and coupons via JSON:API; exploited.
Oct 30, 2026
Gotenberg PDF Metadata RCE, Exploited in the Wild (CVE-2026-42589)
A newline in a PDF metadata key runs ExifTool Perl code as a command on unauthenticated Gotenberg...
Oct 30, 2026
Linux Kernel TCP Handshake Race RCE (CVE-2026-98432)
A race in Linux IPv4 TCP handshakes since 4.4 frees socket options in use; kernel team scores 9.8...
Oct 30, 2026
Telegram for Android Voice-Call RCE, Fixed in 12.10.4
Telegram for Android 8.6.2 to 12.10.3 let a caller run code once the victim answered a voice call...
Oct 29, 2026
More by Ostorlab Team
Cisco ASA and FTD SSL VPN DoS Exploited in the Wild (CVE-2026-76418)
An unauthenticated crafted request reloads Cisco ASA and FTD firewalls using secondary authentication on a tunnel group; High 8.6, exploited, KEV.
Oct 29, 2026
GoAhead mTLS Accepts Revoked Client Certificates (CVE-2026-115881)
GoAhead loads the CRL but never checks it, so revoked client certificates pass mTLS; fixed in 6.1.1, shipped to device builders on August 2.
Oct 29, 2026
Oracle PeopleSoft RCE Exploited by ShinyHunters (CVE-2026-35273)
Unauthenticated RCE in PeopleTools 8.61 and 8.62 through an SSRF chain into PSEMHUB: exploited as a zero-day by ShinyHunters, fixed June 10.
Oct 29, 2026
Apple CoreGraphics Code Execution Exploited on iOS (CVE-2026-86950)
CVE-2026-86950, an exploited CoreGraphics out-of-bounds write, is in CISA KEV; iOS and iPadOS 26.7.1 and 18.7.11, macOS Tahoe 26.7.1 and Sequoia 15.8.1 fix it.
Oct 28, 2026
MLflow Unauthenticated RCE on Tracking Servers (CVE-2026-116692)
CVE-2026-116692 (CVSS 9.8) lets any caller of a default MLflow 3.12.0-3.16.x tracking server upload and run Python code as the server process; fixed in 3.17.0.
Oct 28, 2026
Magento and Adobe Commerce PolyShell RCE Exploited in the Wild (CVE-2026-48356)
PolyShell (CVE-2026-48356) is an unauthenticated file upload in Magento's REST API, mass-exploited since March 2026; Adobe's July 2026 patch releases fix it.
Oct 28, 2026
Ostorlab vs. Manual Pentesting: More Critical Findings, Less Time, Lower Cost
Ostorlab reports more critical findings, shorter testing time, and assessment costs of one-tenth to one-fortieth of manual pentests in completed head-to-head PoCs. Examine the technical evidence and comparison limits.
Oct 28, 2026
AuthMask: Microsoft Authenticator for Android Token Theft (CVE-2026-80097)
Before 6.2606.4246, Microsoft Authenticator for Android handed work-account tokens to any app posing as an installed Microsoft app; fixed by the app update.
Oct 27, 2026
Authlib JWS Signature Bypass, Fixed in 1.9.0 (CVE-2026-96760)
Authlib up to 1.8.0 treats a JWS JSON object with empty signatures as verified without checking the key: Critical CVE-2026-96760 (CVSS 9.1), fixed in 1.9.0.
Oct 27, 2026
OpenHands Software Agent SDK Unauthenticated Sandbox RCE (CVE-2026-112346)
The OpenHands Software Agent SDK exposes its sandbox agent port on every interface with auth off by default, allowing root commands; 1.52.0 fixes Docker but not Apptainer.
Oct 27, 2026