Live· 12 threats · Wednesday, Sep 30· last check 2026-11-04 09:06 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

Wednesday, Sep 30

Most severe in everything

CRITICAL9.8

EXPLOITED IN THE WILD

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as…Zammad GmbH Zammad3 talking

CRITICAL9.8

EXPLOITED IN THE WILD

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an…Cisco Catalyst SD-WAN Manager

CRITICAL9.4

EXPLOITED IN THE WILD

Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system…Zammad GmbH Zammad1 talking

MALICIOUSDO NOT INSTALL

MALICIOUS · REMOVE IT

Malicious code in friendly-greeting-tools (PyPI)friendly-greeting-tools

Wednesday, Sep 30

LOWINCIDENTMongoDB Atlas: Delays in Atlas cluster management operationsMongoDB AtlasVendor2026-09-30 18:51 UTCby status page–WHAT TO DO MEDIUMINCIDENTDatadog: Delayed EventsDatadogVendor2026-09-30 18:02 UTCby status page–WHAT TO DO CRITICAL9.4EXPLOITEDZammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system…Zammad GmbH Zammad1 talkingVendor2026-09-30 17:16 UTCby InfraStack Analyst1talkingFIX 7.2.2 CRITICAL9.8EXPLOITEDZammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as…Zammad GmbH Zammad3 talkingPackage2026-09-30 17:16 UTCby InfraStack Analyst3talkingFIX 6.5.5 MEDIUM5.3Satori-generated SVG has improper escapingsatoriPackage2026-09-22 17:03 UTCby EPSS–FIX 0.33.5 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in friendly-greeting-tools (PyPI)friendly-greeting-toolsPackage2026-09-30 14:38 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in beautifytext (PyPI)beautifytextPackage2026-09-30 11:47 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in whalibmob (npm)whalibmobPackage2026-10-29 13:33 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in cleanup-string (PyPI)cleanup-stringPackage2026-09-30 04:37 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bfox-build-utils (PyPI)bfox-build-utilsPackage2026-09-30 03:04 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in tailwind-forms-kit (npm)tailwind-forms-kitPackage2026-09-30 01:27 UTCby osv-malicious–UNINSTALL CRITICAL9.8EXPLOITEDA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an…Cisco Catalyst SD-WAN ManagerVendor2026-09-30by InfraStack Analyst–FIX 20.9.10.1