https://patchgazette.com/news/vulnerabilities/freertos-plus-tcp-4-4-1-4-2-6-patch-remote-ipv6/Patch Gazetteen2026-10-15T17:26:21ZFreeRTOS-Plus-TCP 4.4.1, 4.2.6 Patch Remote IPv6 RA Parsers Vulnerable to CVE-2026-7425, 7426https://patchgazette.com/news/vulnerabilities/aws-s2n-quic-1-82-0-fixes-unauthenticated-memory/Patch Gazetteen2026-10-15T17:10:45ZAWS s2n-quic 1.82.0 Fixes Unauthenticated Memory Exhaustion Vulnerability CVE-2026-10740https://patchgazette.com/news/vulnerabilities/chatgpt-github-integration-flaw-may-expose/Patch Gazetteen2026-10-15T16:06:39ZChatGPT GitHub Integration Flaw May Expose Private Repository Secretshttps://patchgazette.com/news/vulnerabilities/espocrm-9-3-7-patch-fixes-critical-remote-code/Patch Gazetteen2026-10-15T15:06:22ZEspoCRM 9.3.7 Patch Fixes Critical Remote Code Execution Flawhttps://patchgazette.com/news/vulnerabilities/snyk-agent-fixes-90-2-of-vulnerable-dependencies/Patch Gazetteen2026-10-15T11:16:33ZSnyk Agent Fixes 90.2% of Vulnerable Dependencies, Outperforming Claude Code by 30 Pointshttps://patchgazette.com/news/vulnerabilities/github-poc-enables-remote-code-execution-in/Patch Gazetteen2026-10-15T09:54:52ZGitHub PoC enables remote code execution in FortiClient EMS 7.4.5-7.4.6 via CVE-2026-35616https://patchgazette.com/news/cyber-attacks/anthropic-report-reveals-prompt-injection-attack/Patch Gazetteen2026-10-15T07:48:15ZAnthropic Report Reveals Prompt Injection Attack on Eval Sandbox Targeted 30 AI Labshttps://patchgazette.com/news/vulnerabilities/aws-rolls-out-2026-06-update-to-stop/Patch Gazetteen2026-10-15T07:48:15ZAWS Rolls Out 2026.06 Update to Stop Authenticated Users from Reading Root Files via Symbolic Linkshttps://patchgazette.com/news/cyber-attacks/huntress-analysis-clickfix-and-cookie-theft/Patch Gazetteen2026-10-15T05:06:36ZHuntress Analysis: ClickFix and Cookie Theft Enable Rapid BEC via Fake AI Resultshttps://patchgazette.com/news/vulnerabilities/microsoft-ad-fs-bypass-flaw-cve-2026-69982/Patch Gazetteen2026-10-15T05:04:07ZMicrosoft AD FS Bypass Flaw CVE-2026-69982 Requires Immediate Fix Deploymenthttps://patchgazette.com/news/vulnerabilities/vlife-2-0-1-tokenutil-hardcoded-hs256-key-enables/Patch Gazetteen2026-10-15T05:02:17Zvlife 2.0.1 TokenUtil Hardcoded HS256 Key Enables Critical 9.3 CVSS JWT Forgery and Full Controlhttps://patchgazette.com/news/vulnerabilities/eclipse-netx-duo-versions-up-to-6-5-1-require/Patch Gazetteen2026-10-15T01:20:13ZEclipse NetX Duo versions up to 6.5.1 require urgent review of TLS 1.3 memory handlinghttps://patchgazette.com/news/vulnerabilities/default-certs-in-hitachi-remot-ops-agent-v2-0/Patch Gazetteen2026-10-15T01:17:20ZDefault Certs in Hitachi Remot Ops Agent v2.0 Enable Critical CVE-2026-108336 Admin Takeoverhttps://patchgazette.com/news/vulnerabilities/better-auth-1-7-7-patches-critical-cve-2026/Patch Gazetteen2026-10-15T01:17:20ZBetter Auth 1.7.7 patches critical CVE-2026-110864 flaw enabling OAuth proxy account hijackinghttps://patchgazette.com/news/vulnerabilities/renovate-users-urged-to-update-after-critical-env/Patch Gazetteen2026-10-15T01:17:20ZRenovate Users Urged to Update After Critical Env Variable Bypass CVE-2026-110867https://patchgazette.com/news/vulnerabilities/microsoft-ships-fixes-for-high-severity-rdp/Patch Gazetteen2026-10-14T23:03:52ZMicrosoft Ships Fixes for High-Severity RDP Gateway Use-After-Free Flawhttps://patchgazette.com/news/vulnerabilities/fortinet-confirms-medium-severity-os-command/Patch Gazetteen2026-10-14T23:03:52ZFortinet Confirms Medium-Severity OS Command Injection Flaw in FortiManager fgfmd Daemonhttps://patchgazette.com/news/vulnerabilities/fortimail-webmail-sql-injection-flaw-rated-high/Patch Gazetteen2026-10-14T23:03:52ZFortiMail Webmail SQL Injection Flaw Rated High Severityhttps://patchgazette.com/news/vulnerabilities/windows-globalprotect-6-0-6-3-3-users-face-local/Patch Gazetteen2026-10-14T20:53:40ZWindows GlobalProtect 6.0-6.3.3 Users Face Local DoS Risk From CVE-2026-0314 Type Confusion Bughttps://patchgazette.com/news/vulnerabilities/xbow-uses-ai-to-chain-3-chrome-flaws-earns-250k/Patch Gazetteen2026-10-14T20:49:31ZXbow uses AI to chain 3 Chrome flaws, earns $250k bounty for Windows sandbox escapehttps://patchgazette.com/news/vulnerabilities/junos-os-21-2-24-4-stack-overflow-in-kmd-allows/Patch Gazetteen2026-10-14T20:47:12ZJunos OS 21.2-24.4 Stack Overflow in kmd Allows Unauthenticated Root Code Execution via IKEhttps://patchgazette.com/news/vulnerabilities/juniper-releases-fixes-for-critical/Patch Gazetteen2026-10-14T20:45:55ZJuniper Releases Fixes for Critical Unauthenticated J-Web RCE Vulnerabilityhttps://patchgazette.com/news/vulnerabilities/microsoft-oct-update-fixes-1-413-flaws-including/Patch Gazetteen2026-10-14T16:45:58ZMicrosoft Oct Update Fixes 1,413 Flaws, Including Shell Zero-Day Bypassing Security Warningshttps://patchgazette.com/news/vulnerabilities/video-stitch-cve-2026-110645-allows-os-command/Patch Gazetteen2026-10-14T15:46:32ZVideo-stitch CVE-2026-110645 Allows OS Command Injection in Node.jshttps://patchgazette.com/news/vulnerabilities/net-xml-library-patch-available-for-high-severity/Patch Gazetteen2026-10-14T14:42:37Z.NET XML Library Patch Available for High-Severity Denial of Service Flawhttps://patchgazette.com/news/vulnerabilities/microsoft-releases-net-runtime-patches-for-high/Patch Gazetteen2026-10-14T14:11:20ZMicrosoft releases .NET runtime patches for high-severity symlink privilege escalationhttps://patchgazette.com/news/vulnerabilities/microsoft-patches-net-8-11-to-fix-high-severity/Patch Gazetteen2026-10-14T11:38:46ZMicrosoft patches .NET 8-11 to fix high-severity WPF RCE flaw in preview buildshttps://patchgazette.com/news/vulnerabilities/microsoft-patches-windows-server-zero-day-crash/Patch Gazetteen2026-10-14T11:01:42ZMicrosoft Patches Windows Server Zero-Day Crash Flaw CVE-2026-70111https://patchgazette.com/news/vulnerabilities/microsoft-updates-asp-net-core-8-9-10-to-fix/Patch Gazetteen2026-10-14T09:53:54ZMicrosoft updates ASP.NET Core 8, 9, 10 to fix remote DoS via HTTP/3 deadlock flaw CVE-2026-70186https://patchgazette.com/news/vulnerabilities/microsoft-fixes-xml-algorithmic-complexity-flaw/Patch Gazetteen2026-10-14T09:23:16ZMicrosoft fixes XML algorithmic complexity flaw CVE-2026-69651 in .NET 8-11 runtimes to block remote DoS attackshttps://patchgazette.com/news/vulnerabilities/microsoft-fixes-asp-net-core-email-auth-flaw-in/Patch Gazetteen2026-10-14T09:23:16ZMicrosoft fixes ASP.NET Core email auth flaw in versions 8, 9, and 10https://patchgazette.com/news/vulnerabilities/microsoft-to-harden-refs-on-removable-media-in/Patch Gazetteen2026-10-14T07:33:43ZMicrosoft to harden ReFS on removable media in Windows 11https://patchgazette.com/news/vulnerabilities/fortinet-patches-critical-fortisandbox-gui-auth/Patch Gazetteen2026-10-14T07:23:10ZFortinet patches critical FortiSandbox GUI auth bypass in CVE-2026-107656https://patchgazette.com/news/vulnerabilities/linux-vhost-iotlb-cache-bug-enables-kernel-read/Patch Gazetteen2026-10-14T07:10:31ZLinux vhost IOTLB cache bug enables kernel read/write and guest escapehttps://patchgazette.com/news/vulnerabilities/microsoft-postscript-printer-driver-flaw-cvss-9-8/Patch Gazetteen2026-10-14T04:55:22ZMicrosoft PostScript Printer Driver Flaw CVSS 9.8 Requires Immediate Attentionhttps://patchgazette.com/news/vulnerabilities/nvd-rates-windows-error-reporting-heap-overflow-9/Patch Gazetteen2026-10-14T04:16:06ZNVD Rates Windows Error Reporting Heap Overflow 9.8 Critical for Unauthenticated Remote Code Executionhttps://patchgazette.com/news/vulnerabilities/tyche-softwares-abandoned-cart-pro-critical-sql/Patch Gazetteen2026-10-14T04:14:07ZTyche Softwares Abandoned Cart Pro: Critical SQL Injection Lets Attackers Hijack Admin Accountshttps://patchgazette.com/news/vulnerabilities/printcart-store-v2-9-1-flaw-google-drive-endpoint/Patch Gazetteen2026-10-14T03:12:29ZPrintcart Store v2.9.1 Flaw: Google Drive Endpoint Lets Attackers Run Code Without Loginhttps://patchgazette.com/news/vulnerabilities/adfs-crypto-signature-bug-cve-2026-96252-enables/Patch Gazetteen2026-10-14T01:00:38ZADFS Crypto Signature Bug CVE-2026-96252 Enables Network Spoofing With 9.1 CVSS Scorehttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-users-urged-to-enable-production/Patch Gazetteen2026-10-14T00:55:21ZAdobe ColdFusion Users Urged to Enable Production Secure Profile Against Critical Unauthenticated File Readhttps://patchgazette.com/news/vulnerabilities/cve-2026-48382-critical-aem-auth-flaw-enables/Patch Gazetteen2026-10-13T22:46:16ZCVE-2026-48382: Critical AEM Auth Flaw Enables Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/cvss-9-9-aem-6-5-flaw-enables-remote-code/Patch Gazetteen2026-10-13T22:46:16ZCVSS 9.9 AEM 6.5 Flaw Enables Remote Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-2023-2025-patch-urgent-cvss-10-0/Patch Gazetteen2026-10-13T22:40:18ZAdobe ColdFusion 2023/2025 Patch Urgent: CVSS 10.0 Zero-Click RCE Vulnerability CVE-2026-106624 Discoveredhttps://patchgazette.com/news/vulnerabilities/adobe-coldfusion-critical-cve-2026-105903-enables/Patch Gazetteen2026-10-13T21:47:38ZAdobe ColdFusion Critical CVE-2026-105903 Enables Remote Code Execution Without User Interactionhttps://patchgazette.com/news/vulnerabilities/microsoft-patches-kestrel-http-smuggling-flaw-cve/Patch Gazetteen2026-10-13T21:18:26ZMicrosoft patches Kestrel HTTP smuggling flaw CVE-2026-88092 for ASP.NET Core 8-11 on all platformshttps://patchgazette.com/news/vulnerabilities/microsoft-quic-heap-overflow-patches-available/Patch Gazetteen2026-10-13T20:36:48ZMicrosoft QUIC Heap Overflow Patches Available for .NET 8 Through 11 on Windows