https://patchgazette.com/news/vulnerabilities/apache-answer-2-0-3-patch-fixes-metadata-leak/Patch Gazetteen2026-10-16T09:26:58ZApache Answer 2.0.3 Patch Fixes Metadata Leak Vulnerabilityhttps://patchgazette.com/news/cloud-security/amazon-leads-us-cloud-giants-with-200b-ai-capex/Patch Gazetteen2026-10-16T09:18:47ZAmazon Leads US Cloud Giants With $200B AI Capex Spike To $690B In 2026https://patchgazette.com/news/cyber-attacks/hinton-bengio-urge-new-global-body-to-enforce-air/Patch Gazetteen2026-10-16T09:13:19ZHinton, Bengio urge new global body to enforce air-gapped AI training standardshttps://patchgazette.com/news/vulnerabilities/mise-patches-high-severity-shell-injection-flaw/Patch Gazetteen2026-10-16T08:00:09ZMise patches high-severity shell injection flaw CVE-2026-103929 in version 2026.7.14https://patchgazette.com/news/vulnerabilities/kin-openapi-0-147-0-patches-high-severity/Patch Gazetteen2026-10-16T07:34:15ZKin-openapi 0.147.0 patches high-severity authentication bypass in Go libraryhttps://patchgazette.com/news/vulnerabilities/kin-openapi-cve-2026-100352-patched-in-0-148-0-to/Patch Gazetteen2026-10-16T07:24:38Zkin-openapi CVE-2026-100352 Patched in 0.148.0 to Fix YAML NaN Panichttps://patchgazette.com/news/vulnerabilities/x-org-server-patch-fixes-high-severity-local-2/Patch Gazetteen2026-10-16T06:33:47ZX.Org Server Patch Fixes High-Severity Local Privilege Escalation Flawhttps://patchgazette.com/news/vulnerabilities/anthropic-launches-oss-scanner-to-speed-up-open/Patch Gazetteen2026-10-16T06:26:29ZAnthropic Launches OSS Scanner to Speed Up Open Source Vulnerability Fixeshttps://patchgazette.com/news/cloud-security/microsoft-azure-unveils-infrastructure-upgrades/Patch Gazetteen2026-10-16T06:25:35ZMicrosoft Azure unveils infrastructure upgrades to help enterprises scale AI apps and agentshttps://patchgazette.com/news/vulnerabilities/x-org-server-patch-fixes-high-severity-local/Patch Gazetteen2026-10-16T06:04:52ZX.Org Server Patch Fixes High-Severity Local Privilege Escalation Flawhttps://patchgazette.com/news/vulnerabilities/chrome-152-0-7977-169-for-windows-and-mac-fixes-2/Patch Gazetteen2026-10-16T05:55:41ZChrome 152.0.7977.169 for Windows and Mac Fixes 2 Critical and 8 High-Severity Vulnerabilitieshttps://patchgazette.com/news/vulnerabilities/nomachine-fixes-local-privilege-escalation-in/Patch Gazetteen2026-10-16T05:33:10ZNoMachine Fixes Local Privilege Escalation in Versions 8, 9 and 10https://patchgazette.com/news/vulnerabilities/gstreamer-patch-fixes-critical-rce-flaw-in-rtp/Patch Gazetteen2026-10-16T05:21:10ZGStreamer Patch Fixes Critical RCE Flaw in RTP Processinghttps://patchgazette.com/news/vulnerabilities/dataease-sql-injection-cve-2026-104141-patched-in/Patch Gazetteen2026-10-16T04:21:10ZDataEase SQL Injection CVE-2026-104141 Patched in Version 2.10.26https://patchgazette.com/news/vulnerabilities/dataease-sql-injection-cve-2026-104143-patched-in/Patch Gazetteen2026-10-16T04:09:04ZDataEase SQL Injection CVE-2026-104143 Patched in Version 2.10.26https://patchgazette.com/news/vulnerabilities/eclipse-vert-x-http-decoder-flaw-enables-request/Patch Gazetteen2026-10-16T04:09:04ZEclipse Vert.x HTTP Decoder Flaw Enables Request Smuggling in 5.0, 5.1, and 5.2 Brancheshttps://patchgazette.com/news/vulnerabilities/holaos-authorization-flaw-lets-external-users-run/Patch Gazetteen2026-10-16T03:42:14ZholaOS Authorization Flaw Lets External Users Run Agent Taskshttps://patchgazette.com/news/vulnerabilities/freerdp-proxy-memory-exhaustion-flaw-rated-high/Patch Gazetteen2026-10-16T02:21:03ZFreeRDP Proxy Memory Exhaustion Flaw Rated High Severityhttps://patchgazette.com/news/vulnerabilities/renovate-ssrf-flaw-exposes-internal-metadata-in/Patch Gazetteen2026-10-16T01:40:52ZRenovate SSRF Flaw Exposes Internal Metadata in Versions Before 44.79.0https://patchgazette.com/news/vulnerabilities/netgate-patches-high-severity-command-injection/Patch Gazetteen2026-10-16T00:55:27ZNetgate patches high-severity command injection in pfSense FRR packagehttps://patchgazette.com/news/vulnerabilities/eclipse-vert-x-mqtt-client-vulnerability-allows/Patch Gazetteen2026-10-15T22:43:21ZEclipse Vert.x MQTT Client Vulnerability Allows Unbounded Memory Growthhttps://patchgazette.com/news/vulnerabilities/eclipse-jetty-flaw-leaks-proxy-credentials-via/Patch Gazetteen2026-10-15T22:29:56ZEclipse Jetty Flaw Leaks Proxy Credentials via Misinterpreted 407 Errorshttps://patchgazette.com/news/vulnerabilities/eclipse-jetty-security-flaw-cve-2026-18661/Patch Gazetteen2026-10-15T21:51:49ZEclipse Jetty security flaw CVE-2026-18661 bypasses annotations in mixed configurationshttps://patchgazette.com/news/vulnerabilities/qnap-virtualization-station-patch-fixes-high/Patch Gazetteen2026-10-15T21:23:13ZQNAP Virtualization Station patch fixes high-severity link resolution flawhttps://patchgazette.com/news/vulnerabilities/unitronics-unistream-pro-and-unilogic-face-high/Patch Gazetteen2026-10-15T19:41:35ZUnitronics UniStream Pro and UniLogic Face High-Severity Auth Flawhttps://patchgazette.com/news/vulnerabilities/aliasvault-browser-extension-fixes-passkey-origin/Patch Gazetteen2026-10-15T19:00:31ZAliasVault Browser Extension Fixes Passkey Origin Binding Flaw in 0.29.4https://patchgazette.com/news/vulnerabilities/palo-alto-networks-issues-advisory-for-pan-os/Patch Gazetteen2026-10-15T18:46:22ZPalo Alto Networks issues advisory for PAN-OS denial of service flawhttps://patchgazette.com/news/vulnerabilities/tianji-sql-injection-patch-available-for-versions/Patch Gazetteen2026-10-15T18:44:05ZTianji SQL Injection Patch Available for Versions Below 1.31.29https://patchgazette.com/news/vulnerabilities/atlassian-data-center-users-must-patch-critical/Patch Gazetteen2026-10-15T18:33:00ZAtlassian Data Center Users Must Patch Critical File Access Flaw by Oct 18https://patchgazette.com/news/vulnerabilities/freertos-plus-tcp-4-4-1-4-2-6-patch-remote-ipv6/Patch Gazetteen2026-10-15T17:26:21ZFreeRTOS-Plus-TCP 4.4.1, 4.2.6 Patch Remote IPv6 RA Parsers Vulnerable to CVE-2026-7425, 7426https://patchgazette.com/news/vulnerabilities/aws-s2n-quic-1-82-0-fixes-unauthenticated-memory/Patch Gazetteen2026-10-15T17:10:45ZAWS s2n-quic 1.82.0 Fixes Unauthenticated Memory Exhaustion Vulnerability CVE-2026-10740https://patchgazette.com/news/vulnerabilities/chatgpt-github-integration-flaw-may-expose/Patch Gazetteen2026-10-15T16:06:39ZChatGPT GitHub Integration Flaw May Expose Private Repository Secretshttps://patchgazette.com/news/vulnerabilities/espocrm-9-3-7-patch-fixes-critical-remote-code/Patch Gazetteen2026-10-15T15:06:22ZEspoCRM 9.3.7 Patch Fixes Critical Remote Code Execution Flawhttps://patchgazette.com/news/vulnerabilities/snyk-agent-fixes-90-2-of-vulnerable-dependencies/Patch Gazetteen2026-10-15T11:16:33ZSnyk Agent Fixes 90.2% of Vulnerable Dependencies, Outperforming Claude Code by 30 Pointshttps://patchgazette.com/news/vulnerabilities/github-poc-enables-remote-code-execution-in/Patch Gazetteen2026-10-15T09:54:52ZGitHub PoC enables remote code execution in FortiClient EMS 7.4.5-7.4.6 via CVE-2026-35616https://patchgazette.com/news/cyber-attacks/anthropic-report-reveals-prompt-injection-attack/Patch Gazetteen2026-10-15T07:48:15ZAnthropic Report Reveals Prompt Injection Attack on Eval Sandbox Targeted 30 AI Labshttps://patchgazette.com/news/vulnerabilities/aws-rolls-out-2026-06-update-to-stop/Patch Gazetteen2026-10-15T07:48:15ZAWS Rolls Out 2026.06 Update to Stop Authenticated Users from Reading Root Files via Symbolic Linkshttps://patchgazette.com/news/cyber-attacks/huntress-analysis-clickfix-and-cookie-theft/Patch Gazetteen2026-10-15T05:06:36ZHuntress Analysis: ClickFix and Cookie Theft Enable Rapid BEC via Fake AI Resultshttps://patchgazette.com/news/vulnerabilities/microsoft-ad-fs-bypass-flaw-cve-2026-69982/Patch Gazetteen2026-10-15T05:04:07ZMicrosoft AD FS Bypass Flaw CVE-2026-69982 Requires Immediate Fix Deploymenthttps://patchgazette.com/news/vulnerabilities/vlife-2-0-1-tokenutil-hardcoded-hs256-key-enables/Patch Gazetteen2026-10-15T05:02:17Zvlife 2.0.1 TokenUtil Hardcoded HS256 Key Enables Critical 9.3 CVSS JWT Forgery and Full Controlhttps://patchgazette.com/news/vulnerabilities/eclipse-netx-duo-versions-up-to-6-5-1-require/Patch Gazetteen2026-10-15T01:20:13ZEclipse NetX Duo versions up to 6.5.1 require urgent review of TLS 1.3 memory handlinghttps://patchgazette.com/news/vulnerabilities/default-certs-in-hitachi-remot-ops-agent-v2-0/Patch Gazetteen2026-10-15T01:17:20ZDefault Certs in Hitachi Remot Ops Agent v2.0 Enable Critical CVE-2026-108336 Admin Takeoverhttps://patchgazette.com/news/vulnerabilities/better-auth-1-7-7-patches-critical-cve-2026/Patch Gazetteen2026-10-15T01:17:20ZBetter Auth 1.7.7 patches critical CVE-2026-110864 flaw enabling OAuth proxy account hijackinghttps://patchgazette.com/news/vulnerabilities/renovate-users-urged-to-update-after-critical-env/Patch Gazetteen2026-10-15T01:17:20ZRenovate Users Urged to Update After Critical Env Variable Bypass CVE-2026-110867https://patchgazette.com/news/vulnerabilities/microsoft-ships-fixes-for-high-severity-rdp/Patch Gazetteen2026-10-14T23:03:52ZMicrosoft Ships Fixes for High-Severity RDP Gateway Use-After-Free Flawhttps://patchgazette.com/news/vulnerabilities/fortinet-confirms-medium-severity-os-command/Patch Gazetteen2026-10-14T23:03:52ZFortinet Confirms Medium-Severity OS Command Injection Flaw in FortiManager fgfmd Daemonhttps://patchgazette.com/news/vulnerabilities/fortimail-webmail-sql-injection-flaw-rated-high/Patch Gazetteen2026-10-14T23:03:52ZFortiMail Webmail SQL Injection Flaw Rated High Severityhttps://patchgazette.com/news/vulnerabilities/windows-globalprotect-6-0-6-3-3-users-face-local/Patch Gazetteen2026-10-14T20:53:40ZWindows GlobalProtect 6.0-6.3.3 Users Face Local DoS Risk From CVE-2026-0314 Type Confusion Bughttps://patchgazette.com/news/vulnerabilities/xbow-uses-ai-to-chain-3-chrome-flaws-earns-250k/Patch Gazetteen2026-10-14T20:49:31ZXbow uses AI to chain 3 Chrome flaws, earns $250k bounty for Windows sandbox escapehttps://patchgazette.com/news/vulnerabilities/junos-os-21-2-24-4-stack-overflow-in-kmd-allows/Patch Gazetteen2026-10-14T20:47:12ZJunos OS 21.2-24.4 Stack Overflow in kmd Allows Unauthenticated Root Code Execution via IKEhttps://patchgazette.com/news/vulnerabilities/juniper-releases-fixes-for-critical/Patch Gazetteen2026-10-14T20:45:55ZJuniper Releases Fixes for Critical Unauthenticated J-Web RCE Vulnerabilityhttps://patchgazette.com/news/vulnerabilities/microsoft-oct-update-fixes-1-413-flaws-including/Patch Gazetteen2026-10-14T16:45:58ZMicrosoft Oct Update Fixes 1,413 Flaws, Including Shell Zero-Day Bypassing Security Warningshttps://patchgazette.com/news/vulnerabilities/video-stitch-cve-2026-110645-allows-os-command/Patch Gazetteen2026-10-14T15:46:32ZVideo-stitch CVE-2026-110645 Allows OS Command Injection in Node.jshttps://patchgazette.com/news/vulnerabilities/net-xml-library-patch-available-for-high-severity/Patch Gazetteen2026-10-14T14:42:37Z.NET XML Library Patch Available for High-Severity Denial of Service Flawhttps://patchgazette.com/news/vulnerabilities/microsoft-releases-net-runtime-patches-for-high/Patch Gazetteen2026-10-14T14:11:20ZMicrosoft releases .NET runtime patches for high-severity symlink privilege escalationhttps://patchgazette.com/news/vulnerabilities/microsoft-patches-net-8-11-to-fix-high-severity/Patch Gazetteen2026-10-14T11:38:46ZMicrosoft patches .NET 8-11 to fix high-severity WPF RCE flaw in preview buildshttps://patchgazette.com/news/vulnerabilities/microsoft-patches-windows-server-zero-day-crash/Patch Gazetteen2026-10-14T11:01:42ZMicrosoft Patches Windows Server Zero-Day Crash Flaw CVE-2026-70111https://patchgazette.com/news/vulnerabilities/microsoft-updates-asp-net-core-8-9-10-to-fix/Patch Gazetteen2026-10-14T09:53:54ZMicrosoft updates ASP.NET Core 8, 9, 10 to fix remote DoS via HTTP/3 deadlock flaw CVE-2026-70186