CVE ID :CVE-2026-119168 Published : Oct. 29, 2026, 7:17 p.m. | 56 minutes ago Description :HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership…
CVE ID :CVE-2026-103093 Published : Oct. 29, 2026, 7:17 p.m. | 56 minutes ago Description :ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin…
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t. There’s a strange mix of clever tricks and…
CVE ID :CVE-2026-118769 Published : Oct. 29, 2026, 6:17 p.m. | 1 hour, 55 minutes ago Description :Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a…
CVE ID :CVE-2026-119115 Published : Oct. 29, 2026, 5:18 p.m. | 54 minutes ago Description :Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates,…
CVE ID :CVE-2026-118764 Published : Oct. 29, 2026, 5:18 p.m. | 54 minutes ago Description :minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1, src implements firstPhasePreProcess() so that, at optimizationLevel 2 or…
CVE ID :CVE-2026-118762 Published : Oct. 29, 2026, 5:18 p.m. | 54 minutes ago Description :Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github workflow runs on pull_request_target with repository write permissions, checks out a fork pull…
CVE ID :CVE-2023-7357 Published : Oct. 29, 2026, 5:17 p.m. | 55 minutes ago Description :A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2…
CVE ID :CVE-2026-93851 Published : Oct. 28, 2026, 9:41 p.m. | 10 minutes ago Description :Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Agents plugin’s mention reminder component, which…
CVE ID :CVE-2026-118668 Published : Oct. 28, 2026, 9:16 p.m. | 34 minutes ago Description :langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten…