October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft's October 2026 Patch Tuesday patches 1,417 flaws, including an already exploited Windows Shell bypass.
6 stories, newest first · one card per story
Microsoft's October 2026 Patch Tuesday patches 1,417 flaws, including an already exploited Windows Shell bypass.
Cisco Nexus 9000 ACI switches allow unauthenticated bypass of EPG contracts via DHCP UDP ports.
Ubuntu patches dracut flaws, including DHCP option injection that could run code as root at boot.

D-Link warns of an unpatched maximum-severity DHCP buffer overflow in legacy DIR-822A routers, with public proof-of-concept code.
ZDI discloses an authenticated DHCP command-injection RCE in Cisco ThousandEyes, CVE-2026-20350, CVSS 7.2.
Ubuntu patches dracut CVE-2026-15816, where a rogue adjacent-network DHCP server can inject root-executed commands during boot-failure handling.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views