What's Getting Pwned
What's Getting Pwned
// live feed What's getting pwned right now Ongoing security incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts behind each one. live 35 critical 15 not fully patched 18 ## 191 incidents in the last year through Oct 22, 2026 crit 4 · high 3 · med 2 · low 1 · upd ½ severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½ less more Get an…
Vulnerabilities mentionedAll →
- published — PoC
- published —
Indicators of compromiseauto-extracted · verify before use · export allAll →
| Type | Indicator | Context |
|---|---|---|
| domain | my-github.com | und Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found |
| ipv4 | 193.32.204.199 | rets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from |
Full article3,017 words · extracted from pwn.watch · click to collapse
// live feed
What's getting pwned right now
Ongoing security incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts behind each one.
- 35
- 15
- 18
live
critical
not fully patched
## 191 incidents in the last year
through Oct 22, 2026
crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
Get an email when a new major security incident drops. No spam, unsubscribe any time.
medium
live
partial fix
since Oct 22, 2026updated Oct 22, 2026, 16:53 UTC
Major U.S. banks detect unauthorized third-party AI agents inside customer accounts
› Online banking accounts at major U.S. banks (Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo, Citi)
Axios reports that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan and Wells Fargo, are detecting third-party AI agents operating inside customer accounts. In most cases the agent logs in with the customer's own credentials and permission, which breaks bank rules that require people to log in themselves. Some banks also saw agents contact call centers or take actions that appeared independent of user instructions, and executives say they often can't tell a human from an agent, or an authorized agent from a rogue one. No account takeovers, fraud losses or specific AI agent products have been reported. Morgan Stanley is blocking third-party agents and JPMorgan, Bank of America and Citi are restricting them. Don't give an AI agent your bank username and password.
critical
live
patched
since Oct 21, 2026updated Oct 22, 2026, 16:00 UTC
GitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)
› GitLab CE/EE (self-managed)
GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.
CVE-2026-110264
critical
live
unpatched
since Oct 21, 2026updated Oct 22, 2026, 16:56 UTC
Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0)
› Linux kernel: ksmbd (in-kernel SMB server) and SMB Direct, skbuff/NFQUEUE networking, vmwgfx, nvmet
On Oct 21, Trend Micro's Zero Day Initiative sent several unpatched Linux kernel vulnerability reports to security@kernel.org but Cc'd the public linux-kernel and subsystem lists, so full technical details (code paths, KASAN traces) are now public before fixes ship. The worst are two ksmbd (in-kernel SMB server) remote code execution bugs that ZDI scores CVSS 9.0: an SMB Direct integer underflow (needs an RDMA device and a writable share) and a protocol-dispatch race (needs a guest share). Also leaked: an skb_zerocopy local privilege escalation (CVSS 7.8), a vmwgfx out-of-bounds write LPE, and an nvmet info leak. No CVEs yet and no fixed mainline or stable release; the ksmbd race fix sits in the ksmbd maintainer tree and an SMB Direct fix is in a branch aimed at Linux 7.5. No exploitation reported. Only machines running ksmbd are exposed to the RCEs.
critical
live
patched
since Oct 21, 2026updated Oct 22, 2026, 16:00 UTC
LiteLLM 1.107.0 PyPI/Docker supply-chain compromise
› LiteLLM (PyPI + official Docker/GHCR images)
On Oct 21 2026 attackers compromised LiteLLM’s release pipeline and published malicious litellm==1.107.0 to PyPI (live ~2 hours) plus compromised Docker Hub/GHCR tags (v1.107.0, latest, main-latest, main-stable). The wheels install cook.pth / cook.py / sitecustomize.py that steal cloud, developer and AI-tool credentials at every Python startup and open a remote-code loader. Second LiteLLM compromise of 2026.
MAL-2026-2144
high
live
partial fix
since Oct 21, 2026updated Oct 22, 2026, 15:59 UTC
ISC BIND 9: replayed GSS-TSIG messages corrupt memory, possible RCE (CVE-2026-94300)
› ISC BIND 9 (named) DNS server
ISC disclosed a remotely exploitable memory-corruption bug in BIND 9's named on Oct 21. An attacker who captures a GSS-TSIG signed UDP message (the Kerberos signing used for Active Directory-style dynamic DNS updates) can replay it while the negotiated key is still valid and, combined with crafted queries to a zone they control, may get remote code execution, or at least crash named. CVSS 8.1 (High). No workaround. Affects BIND 9.11.0 through 9.18.50, 9.20.0 through 9.20.29 and 9.21.0 through 9.21.26. Fixed in 9.20.30 and 9.21.27; ISC lists no 9.18 fix. ISC knows of no active exploitation. Debian trixie has a fixed package; Debian bookworm and Ubuntu are still waiting.
CVE-2026-94300
high
live
patched
since Oct 21, 2026updated Oct 22, 2026, 11:18 UTC
Node.js October 2026 security releases (Brotli RCE + TLS/DNS highs)
› Node.js
On Oct 21 2026 Node.js shipped security updates for 22.x, 24.x and 26.x fixing ten vulnerabilities. The headline issue is CVE-2026-111497, a high-severity Brotli decoder out-of-bounds write that can enable remote code execution when attacker-controlled Brotli data is decoded. The same release also fixes TLS hostname/IP bypasses and DNS NUL truncation, and refreshes the bundled CA store for the eMudhra incident.
CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069
+6 more
high
live
partial fix
since Oct 21, 2026updated Oct 22, 2026, 16:32 UTC
Railway discloses unauthorized access to customer environment variables
› Railway (hosted platform)
On Oct 21 2026 Railway reported anomalous activity on systems storing customer environment variables. An unauthorized third party may have accessed encrypted env vars and, for some, obtained decrypted contents (API keys, DB/registry credentials). Railway says it believes this is part of a series of attacks on platform companies aimed at compromising AI inference providers, and asked upstream providers to revoke keys. Builds were paused platform-wide for ~a day; on Oct 22 they were restored for Enterprise and Pro, with Hobby/Free/Trial still pending. All users are told to rotate secrets while scoping continues.
critical
live
patched
since Oct 20, 2026updated Oct 22, 2026, 15:19 UTC
Signal calls can stay live after hang-up (RingRTC CVE-2026-113380)
› Signal (RingRTC calling library, @signalapp/ringrtc)
A bug in RingRTC, the open-source library behind Signal's voice and video calls, lets the other party on a call flood the call's state-machine event queue so a local hang-up gets stuck behind the backlog, and audio (possibly video) keeps flowing to them after the victim thinks the call ended. Affects every Signal client (Android, iOS, Desktop) embedding RingRTC before 2.72.0. Fixed in RingRTC 2.72.0 (released Sep 4 2026, disclosed Oct 20); a conceptual PoC is public, no known exploitation.
CVE-2026-113380
Oct 20highEG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerabilitypatched
› EG Secure Solutions SiteGuard Server Edition patched
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Added to CISA KEV on 2026-10-20.
CVE-2026-106931
Oct 20highGMO Onamae Desktop Cloud malware on customer VPSpartial fix
› Onamae Desktop Cloud (GMO Internet) partial fix
GMO Internet’s Japanese VPS service Onamae Desktop Cloud said an attacker installed malicious programs in customer environments, forcing shutdown of as many as ~26,739 servers with no immediate restart date (mid-October 2026 reporting).
Oct 20highSiemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerabilitypatched
› Siemens Software Center patched
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added to CISA KEV on 2026-10-20.
CVE-2026-110936
unknown
live
partial fix
since Oct 20, 2026updated Oct 22, 2026, 11:19 UTC
HTTP/3 QPACK “Header Accordions” memory-amplification DoS
› HTTP/3 / QPACK stacks (quic-go, Cloudflare quiche, lsquic, Bun, aioquic, h3, Wireshark, …)
FoxIO published research (Oct 20 2026) showing that missing or late decoded-header limits in QPACK let a tiny HTTP/3 HEADERS frame expand into huge server memory use (up to ~4000× on Bun). Seven of ten implementations tested were vulnerable; quic-go, Cloudflare quiche, lsquic and Wireshark are patched, while Bun, aioquic/mitmproxy and h3 remained unpatched at publication.
CVE-2025-64702CVE-2026-12523CVE-2025-13945
critical
live
patched
since Oct 19, 2026updated Oct 22, 2026, 16:00 UTC
OpenCode: malicious MCP server can run code on Windows/WSL during sign-in (no CVE)
› OpenCode AI coding agent (Anomaly) on Windows and WSL
A command-injection flaw in the OpenCode AI coding agent let a malicious or later-hijacked remote MCP server run PowerShell commands on a developer's Windows or WSL machine when they started the MCP OAuth sign-in. The server-supplied authorization endpoint was passed unescaped to an old version of the open package. Anomaly fixed it in 1.18.33 on Sep 28 without a CVE or advisory, so scanners won't flag 1.0.137 through 1.18.32. macOS and Linux are not affected. Pillar Security found it and rates it 9.8; no in-the-wild exploitation reported.
critical
live
partial fix
since Oct 18, 2026updated Oct 22, 2026, 16:56 UTC
eMudhra intermediate CA private keys compromised
› eMudhra / emSign Global TLS intermediates; any client shipping Mozilla-style CA stores
Eight eMudhra Global TLS intermediate CA private keys were found to be cryptographically weak / recoverable (researcher report Oct 18). Mozilla, Chrome, Apple and Microsoft blocked the intermediates; eMudhra revoked them Oct 19 and the ECC root was distrusted as a precaution. Downstream runtimes that ship their own trust stores (Go, Node.js, Electron, Python certifi, curl, etc.) needed emergency CA-bundle updates so they stop trusting the compromised chains.
CVE-2026-111943CVE-2026-91403
critical
live
partial fix
since Oct 17, 2026updated Oct 22, 2026, 16:56 UTC
PHP2Shell: critical unauthenticated RCE in PHP core
› PHP
Two critical remote-code-execution flaws in PHP core (CVE-2026-109618 and CVE-2026-109619, aka “PHP2Shell”) were disclosed early after an embargo leak. Both score CVSS 9.2 and can let an unauthenticated attacker run code on servers serving PHP web requests, especially Apache mod_php. Patches shipped Oct 21 2026 (appliance vendors such as QNAP are still preparing fixes); exploitation attempts were observed before and after the patch, and watchTowr / AWS report active scanning.
CVE-2026-109618CVE-2026-109619
high
live
partial fix
since Oct 17, 2026updated Oct 22, 2026, 16:32 UTC
OpenCode Console breach exposes users' saved OpenAI / Anthropic / Google API keys
› OpenCode Console (hosted service by Anomaly)
On the night of Oct 16 2026 an intruder reached a legacy OpenCode Console system that was being decommissioned and may have exposed third-party AI provider keys saved in Console workspaces. OpenCode says 1.4% of Console users (those with external providers linked) were affected and tied it to a large-scale distillation attack. Users reported unauthorized charges up to ~$1,700 and some Google Cloud project suspensions. Anthropic and Google revoked/blocked exposed keys; OpenAI refunded drawn credits. The OpenCode app itself (local keys) was not affected.
critical
live
patched
since Oct 16, 2026updated Oct 22, 2026, 11:20 UTC
Plex2Shell: chained Plex Media Server RCE exploited for miners
› Plex Media Server
Four Plex Media Server flaws (CVE-2026-96652/96654/96655/96656), together called Plex2Shell, chain to unauthenticated admin-token theft and code execution. Researcher Zach Main published details Oct 16 and a PoC shortly after; exploitation of internet-facing servers (cryptominers + residential proxies) began by Oct 17. Fixed in 1.43.3.10861 (released earlier in August); CISA added the chain to KEV with a federal deadline of Oct 23.
CVE-2026-96652CVE-2026-96654CVE-2026-96655CVE-2026-96656
Oct 16highFortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerabilitypatched
› Fortinet Multiple Products patched
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Added to CISA KEV on 2026-10-16.
Oct 15highAtlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerabilitypatched
› Atlassian Multiple Products patched
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. Added to CISA KEV on 2026-10-15.
critical
live
partial fix
since Oct 14, 2026updated Oct 22, 2026, 16:56 UTC
Zeabur breach exposes 3.2M env-var records; company to shut down
› Zeabur (PaaS)
Zeabur disclosed an October 14–15 2026 security incident in which an attacker used leaked internal credentials stored in plaintext to access shared clusters in 9 regions, root into 101 Zeabur-managed GCP dedicated servers, and read the platform database, exposing ~3.22 million environment-variable records across 321,810 accounts. Zeabur is winding down: from December 1 2026 shared-cluster services pause and dedicated servers stop renewing, and on December 31 all services stop and service data is deleted. Refund and incident-claim requests close November 30. Users must rotate every secret stored on Zeabur and migrate off.
Oct 14highAhsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerabilitypatched
› Ahsay AhsayCBS patched
Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. CISA added CVE-2026-105134, CVE-2026-105133 to the Known Exploited Vulnerabilities catalog on 2026-10-14 based on evidence of active exploitation.
CVE-2026-105134 · CVE-2026-105133
Oct 14highCisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerabilitypatched
› Cisco Secure Email Gateway patched
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Added to CISA KEV on 2026-10-14.
Oct 14highPalo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerabilitypatched
› Palo Alto Networks PAN-OS patched
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Added to CISA KEV on 2026-10-14.
medium
live
partial fix
since Oct 14, 2026updated Oct 22, 2026, 14:58 UTC
GoDaddy mass-revokes 404,607 TLS certificates over CP/CPS profile mismatch
› GoDaddy / Starfield TLS certificates (DV, OV, EV)
GoDaddy (Starfield) found that 404,607 TLS certificates carried policy information (policy OIDs, CPS URI) that didn't match its own published CP/CPS, which under the CA/Browser Forum Baseline Requirements means they must be revoked within five days. GoDaddy missed the Oct 18 deadline and says the certificates were revoked on Oct 21 2026. Nothing was hacked and no keys leaked, but sites still serving a revoked certificate can show browser warnings or become unreachable until the re-issued certificate is installed.
critical
live
patched
since Oct 8, 2026updated Oct 22, 2026, 11:18 UTC
PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)
› Linux kernel networking (host side of KVM/Firecracker and similar)
Paulos Yibelo / pwn.ai found a Critical Linux networking flaw (CVE-2026-99999, CVSS 9.3) during Vercel’s $1M Sandbox challenge. Guest-controlled checksum metadata can rewrite an IPv4 header after validation, enabling host-memory disclosure and, in lab conditions, guest-to-host code execution on KVM/Firecracker. Upstream fix merged Oct 2026; host kernels need patch + reboot. Affects multi-tenant VPS / sandbox providers more than end-user desktops.
CVE-2026-99999
high
live
partial fix
since Oct 8, 2026updated Oct 22, 2026, 12:04 UTC
GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos
› GitHub repositories / GitHub Actions (compromised maintainer accounts)
GhostAction, a campaign first documented by GitGuardian in Sept 2025, came back in 2026. It hit 772 repos in Aug-Sep 2026, then surged on Oct 8-12: about 1,900 compromised GitHub accounts pushed fake 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from running around Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found in 94 repos.
critical
live
partial fix
since Oct 7, 2026updated Oct 22, 2026, 16:56 UTC
tensorlake@0.5.144 npm Shai-Hulud worm with hostage GitHub token
› tensorlake (npm)
On Oct 8 2026, tensorlake@0.5.144 was published from the real GitHub repo (with npm provenance) carrying a preinstall hook that installs a Shai-Hulud-style credential-stealing worm. It harvests npm/GitHub/cloud/SSH/AI-tool secrets, spreads to other packages, and installs a “gh-token-monitor” that wipes the home directory if the stolen GitHub token is revoked. Pin 0.5.143; remove the monitor before rotating tokens.
GHSA-8g63-53c9-65j2
Oct 4highCitrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerabilitypatched
› Citrix NetScaler patched
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. Added to CISA KEV on 2026-10-04.
Oct 2highZammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerabilitypatched
› Zammad GmbH Zammad patched
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 based on evidence of active exploitation.
CVE-2026-102490 · CVE-2026-102489
high
live
partial fix
since Oct 1, 2026updated Oct 22, 2026, 11:20 UTC
Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
› Ivanti Connect Secure (ICS)
Volexity observed threat actor UTA0576 chaining an Ivanti Connect Secure authentication-bypass / RCE zero-day (CVE-2026-104935) with additional flaws from about Oct 1–3 2026 to get unauthenticated root on fully patched appliances, re-exploiting in memory without planting webshells. Ivanti patched CVE-2026-104935 on Oct 13; CISA added it to KEV. One privilege-escalation piece of the chain was still being fixed at disclosure.
CVE-2026-104935
critical
live
patched
since Sep 30, 2026updated Oct 22, 2026, 11:18 UTC
FortiMail unauthenticated file-write zero-day CVE-2026-104286
› Fortinet FortiMail
Fortinet FortiMail CVE-2026-104286 (CVSS 9.8) is an unauthenticated arbitrary file write via path traversal / null-byte issues in Identity-Based Encryption web flows. CISA confirmed active exploitation and ordered federal mitigation; Fortinet published FG-IR-26-175 with patches and interim mitigations (disable IBE / restrict admin/webmail).
CVE-2026-104286
show 3 more live incidents3 more live incidents
September 2026 1
high
live
partial fix
since Sep 9, 2026updated Oct 22, 2026, 11:20 UTC
PingCAP / TiDB Cloud breach: stolen service-account credentials, data and source code taken
› PingCAP TiDB Cloud (hosted database platform)
PingCAP confirmed that between Sep 9 and Oct 7 2026 an unauthorized party used stolen service-account credentials to access internal systems, copy data and obtain source code. Exported records included TiDB Cloud user names/emails, org/project associations, SQL-editor text, billing/contract data and an encrypted API-key table. Extortion group FulcrumSec claims 10.6 TB and 115k plaintext API keys; those figures are unverified and PingCAP disputes the API-key claim. No evidence data stored in TiDB was affected.
August 2026 1
critical
live
partial fix
since Aug 29, 2026updated Oct 22, 2026, 16:56 UTC
BeyondTrust Remote Support zero-day CVE-2026-102764 (ARMORY CASTLE)
› BeyondTrust Remote Support (formerly Bomgar)
China-nexus actor ARMORY CASTLE (ex-UNC5221) exploited CVE-2026-102764, a critical unauthenticated file-operations flaw in BeyondTrust Remote Support, as a zero-day from late August 2026. BeyondTrust issued BT26-05-RS; SaaS was auto-patched by Oct 9; CISA added the CVE to KEV on Oct 16. Self-hosted appliances need the patch plus forensics — patching alone does not clear existing footholds (SAWFLY / BARECLAW).
CVE-2026-102764
February 2025 1
critical
live
unpatched
since Feb 19, 2025updated Oct 22, 2026, 16:56 UTC
Fearless Wallet browser extension leaked private keys for ~20 months
› Fearless Wallet browser extension (Chrome; Firefox build delisted)
The Polkadot Community Foundation warned that Fearless Wallet browser-extension versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 contained code, added Feb 19 2025 inside a large 'TON ecosystem' change, that sent private keys/recovery data to an attacker server when the wallet was unlocked. The code was active at different times until Oct 10 2026. Eight users have reported losses totalling 17,286 DOT. Anyone who used the extension since Feb 2025 must create a new keypair in another wallet and move funds.