Live· 6 threats on fire this week· last check 2026-10-26 22:36 UTC

Everything we’re watching.

One entry per event, merged from every source that reports it. Written by a model from the sources, labelled as such, then checked by the analyst on the ones that matter.

SeveritySignalCategorySourcesFirst publicSocialAffects you

Wednesday, Oct 21

critical9.8ExploitedPHP2Shellphp2shellPHP: out-of-memory handling flaw lets a web request run code

php >= 7.3.0, < 8.2.35 · fix 8.2.35, 8.3.36 · vendor

RuntimeIEPL+1

2026-10-20 18:35 UTC

by InfraStack analyst

60 talkingAffects you?

critical9.2ExploitedPHP2Shellphp2shellPHP: stale request-memory state lets a later request run code

php >= 5.4.0, < 8.2.35 · fix 8.2.35, 8.3.36 · vendor

RuntimeIEPL+1

2026-10-20 18:35 UTC

by InfraStack analyst

59 talkingAffects you?

Thursday, Oct 22

critical9.2Broccoli2ShellHTTP2ShellNode2ShellBrotli: crafted compressed stream overflows buffer, enables remote code execution

brotli >= 1.0.3, < 1.0.10; >= 1.1.0, < 1.1.1; >= 1.2.0, < 1.2.1 · fix 1.0.10, 1.1.1, 1.2.1 · npm, pypi

PackageIEPL+1

2026-10-21 23:58 UTC

by InfraStack analyst

17 talkingAffects you?

critical9.9ExploitedArista VeloCloud Orchestrator: SQL injection lets remote attacker reach internal functions

arista velocloud orchestrator >= 5.2.0, < 5.2.3.18 · fix 5.2.3.18, 6.1.3.10 · vendor

VendorKN

2026-10-22 21:17 UTC

by CISA KEV

–Affects you?

Saturday, Oct 24

high⚡ Early warningExploiteddeepveindrillingMagento stores injected with scanner-evading JavaScript loader via CMS blocks (deepveindrilling.com)

Magento Magento 2 stores missing APSB26-73/APSB25-88 or already backdoored

VendorI

2026-10-24 00:00 UTC

by InfraStack analyst

–Affects you?

Friday, Oct 23

unknownrefluxfsLinux kernel XFS: exchange-range TO_EOF corrupts file sizes, letting shared blocks be rewritten

CVE-2026-98974

RuntimeEN

2026-10-23 13:17 UTC

by EPSS

–Affects you?

← Tuesday, Sep 22On fire · last 7 daysThursday, Sep 24 →

Live· 6 threats on fire this week· last check 2026-10-26 22:36 UTC

Everything we’re watching.

One entry per event, merged from every source that reports it. Written by a model from the sources, labelled as such, then checked by the analyst on the ones that matter.