Technology, Cloud & SaaS — Cybersecurity News & Threat Intelligence | CyberSecureToday

Saturday, 31 October 2026Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

579 articlesUpdated 31 Oct 2026

ThreatsCloud & SaaSBreaking

Ivanti Connect Secure Vulnerability Exploited in Wild Attacks

CVE-2026-111357 in Ivanti Connect Secure (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security pat

31 Oct 202610 min read

CST Editorial Desk

ThreatsCloud & SaaSBreaking
Ivanti Connect Secure Input Validation Flaw Exploited in Wild Attacks
CVE-2026-118527 in Ivanti Connect Secure (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch rel
CST Editorial Desk31 Oct 202610 min read
ThreatsCloud & SaaSHigh
Vsftpd Vulnerability Disclosed
CVE-2026-119568 in Vsftpd (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.0.5 and later.
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
In Teltonika Networks RUTOS devices running versio OS Command Injection Flaw Disclosed
CVE-2026-82104 in In Teltonika Networks RUTOS devices running versio (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
A Vulnerability allowing an unauthenticated attacker Deserialization Flaw Disclosed
CVE-2023-22793 in A Vulnerability allowing an unauthenticated attacker (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
AWS Enterprise Services OS Command Injection Flaw Disclosed
CVE-2026-79916 in AWS Enterprise Services (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.10.5-lts and
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSBreaking
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Vulnerability Exploited in Wild Attacks
CVE-2026-76418 in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (Security Vulnerability) allows remote attackers to trigger active syste
CST Editorial Desk30 Oct 202610 min read
ThreatsCloud & SaaSHigh
PandasTools Agno Vulnerability Disclosed
CVE-2026-119050 in PandasTools Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.11 and later.
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
Yamaha wireless LAN router NWR100 provided by Yama OS Command Injection Flaw Disclosed
CVE-2026-97854 in Yamaha wireless LAN router NWR100 provided by Yama (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
This vulnerability exists in the Radius Xenia M2M SQL Injection Flaw Disclosed
CVE-2026-114358 in This vulnerability exists in the Radius Xenia M2M (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
In openEQUELLA OS Command Injection Flaw Disclosed
CVE-2026-66088 in In openEQUELLA (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.1 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Signal K Server Missing Authentication Flaw Disclosed
CVE-2026-118690 in Signal K Server (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.33.0 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaS
Broadcom VMware ESX Vulnerability Exploited in Wild Attacks
CVE-2026-41709 in Broadcom VMware ESX (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch
CST Editorial Desk29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Ultimate Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed
CVE-2026-115968 in Ultimate Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
The che-machine-exec service constructs a shell co OS Command Injection Flaw Disclosed
CVE-2026-114278 in The che-machine-exec service constructs a shell co (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Dell PowerProtect Data Domain, Feature Release ver Authentication Bypass Flaw Disclosed
CVE-2026-86400 in Dell PowerProtect Data Domain, Feature Release ver (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Pie Register Premium plugin for WordPress is v Unrestricted File Upload Flaw Disclosed
CVE-2026-84999 in The Pie Register Premium plugin for WordPress is v (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Sunhillo SureLine Vulnerability Disclosed
CVE-2026-112352 in Sunhillo SureLine (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9.1.5 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Google Brotli Vulnerability Exploited in Wild Attacks
CVE-2026-111497 in Google Brotli (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.2.0.
CST Editorial Desk28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Adobe Commerce and Magento Unrestricted File Upload Flaw Exploited in Wild Attacks
CVE-2026-48356 in Adobe Commerce and Magento (Unrestricted File Upload) allows remote attackers to trigger active system exploitation. Patch: Vendor securi
CST Editorial Desk28 Oct 202610 min read
ThreatsCloud & SaaS
Electrum Vulnerability Disclosed
CVE-2026-117603 in Electrum (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.7.2 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Agno Vulnerability Disclosed
CVE-2026-35002 in Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.3.24 and later.
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Qode Membership plugin for WordPress is vulner Authentication Bypass Flaw Disclosed
CVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
Google Path Traversal and Missing Authorization in cloud- Path Traversal Flaw Disclosed
CVE-2026-93328 in Google Path Traversal and Missing Authorization in cloud- (Path Traversal) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor27 Oct 202610 min read

Threat scope

DevOps pipelines, cloud IAM, package registries, Kubernetes clusters and zero-day vulnerabilities.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy