Author
Ostorlab Team
Tailworm: Tailscale SSH Privilege Escalation to Root
Tailscale SSH's root daemon dials and replaces unix sockets for approved users, reaching root on permitted servers; upgrade to 1.104.4 or later; disable forwarding until updated.
Oct 27, 2026
Malicious OVHcloud CLI Release Archives Steal Secrets
Swapped archives on five OVHcloud CLI releases delivered a secret-stealing build for 94 minutes o...
Oct 26, 2026
OpenCode MCP OAuth Sign-In RCE on Windows, Fixed in 1.18.33
In OpenCode 1.0.137 to 1.18.32 on Windows and WSL, a malicious MCP server's OAuth sign-in URL rea...
Oct 26, 2026
Linux KSMBD Pre-Auth Flaw, ZDI-Rated CVSS 9.0 RCE (ZDI-CAN-33774)
Linux KSMBD flaws are rated CVSS 9.0 by ZDI, one reachable before authentication. Linux 7.2.15 fi...
Oct 26, 2026
More by Ostorlab Team
FortiSIEM gRPC Path Traversal RCE with a Public PoC (CVE-2026-106173)
FortiSIEM 7.5.0's unauthenticated gRPC service on TCP 27918 lets an attacker overwrite files for RCE; fixed in 7.5.1, public PoC, no known exploitation.
Oct 26, 2026
Postiz Full Takeover by Any Registered User (CVE-2026-115931, CVE-2026-115932, CVE-2026-115933)
In self-hosted Postiz 2.23.0 to 2.25.2 any registered user can read server files, and in 2.15.0 to 2.25.2 they can forge sign-in tokens to take over other organizations; fixed in 2.25.3.
Oct 26, 2026
Pillow Ghostscript Argument Injection RCE (CVE-2026-112900)
Pillow 2.6.0 to 12.3.0 passes an attacker-controlled EPS or PostScript filename to Ghostscript unsanitized, allowing argument injection and command execution; fixed in 13.0.0.
Oct 26, 2026
GitLab Unauthenticated RCE Across 12 Years (CVE-2026-110264)
CVE-2026-110264, a 10.0 integer overflow, exposes every self-managed GitLab since 7.0 to unauthenticated RCE; fixed October 21; its sibling is in KEV.
Oct 25, 2026
Node2Shell: Brotli RCE in Node.js, Bun and Python (CVE-2026-111497)
CVE-2026-111497 (CVSS v4.0 9.2): Brotli decoder overflow in Node.js, Bun, .NET, Python, Envoy and Istio, now in CISA's Known Exploited Vulnerabilities catalog.
Oct 25, 2026
Plex2Shell: Plex RCE Exploited in the Wild (CVE-2026-96656)
Four chained flaws in Plex Media Server before 1.43.3.10861 let an unauthenticated attacker run code as the Plex user; exploited in the wild since October 17, 2026.
Oct 25, 2026
eMudhra CA Compromise: Chrome Drops emSign ECC Root CA - G3 October 27
Eight eMudhra intermediate CA private keys are computable from their public certificates, enabling site forgery; about 30,800 certificates break when Chrome removes emSign ECC Root CA - G3 on October 27, 2026.
Oct 25, 2026
Malicious LiteLLM 1.107.0 Steals Credentials and Backdoors Hosts
A threat actor hijacked LiteLLM's release pipeline with a leaked, never-revoked master key and pushed a malicious 1.107.0 to PyPI and Docker on October 21, 2026. The wheel installs Python startup files that steal credentials and open an hourly backdoor even when LiteLLM is never imported. PyPI quarantined the version after 1 hour 44 minutes; anyone who installed it must rebuild the environment and rotate every reachable secret.
Oct 25, 2026
PHP2Shell: PHP RCE Bug Triggers Millions of Exploit Attempts (CVE-2026-109618)
PAN-OS is actively exploited; separately, a chain rooted 25 servers via an undisclosed vendor's firewalls: PHP RCE fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35.
Oct 25, 2026
Echo WebSocket Proxy Auth Bypass (GHSA-cxf3-9h37-7rr8)
Rejected WebSocket upgrades through Echo's Proxy middleware leave a raw tunnel open to the upstream, and later HTTP requests on that connection skip Echo's router and route middleware, so authentication enforced only at Echo routes is bypassed. The GitHub Advisory Database rates it Critical, CVSS v4.0 9.1, while Echo's own advisory rates it Moderate. Fixed in v4.16.1 and v5.4.1, released October 22, 2026. No public proof of concept and no exploitation in the wild are known.
Oct 24, 2026