Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 66 threats · Tuesday, Oct 13· last check 2026-11-04 07:58 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Tuesday, Oct 13

Most severe in everything

EXPLOITED IN THE WILD

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5,…GitLab Community Edition and Enterprise Edition5 talking

EXPLOITED IN THE WILD

ivanti connect secure: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute…ivanti connect secure3 talking

EXPLOITED IN THE WILD

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an…Microsoft Windows

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationgithub.com/containers/podman

Tuesday, Oct 13

MALICIOUSDON'T INSTALLREMOVE ITMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)crelic-bqwheel-52f66a3f1dPackage2026-10-13 22:46 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCloudflare: Network Performance Issues in LAXCloudflareVendor2026-10-13 20:37 UTCby status page–WHAT TO DO MEDIUMINCIDENTGitHub: [Retroactive] Actions workflow run logs delayedGitHubVendor2026-10-13 20:30 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in fontcase (PyPI)fontcasePackage2026-10-13 19:30 UTCby osv-malicious–UNINSTALL HIGH7.5Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service VulnerabilitySystem.Security.Cryptography.XmlPackage2026-10-13 19:22 UTCby GitHub Advisories–FIX 10.0.13 HIGH7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilitySystem.Security.Cryptography.XmlPackage2026-10-13 19:22 UTCby GitHub Advisories–FIX 10.0.13 HIGH7.5Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service VulnerabilitySystem.Security.Cryptography.XmlPackage2026-10-13 19:22 UTCby GitHub Advisories–FIX 10.0.13 HIGH7.5Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:21 UTCby GitHub Advisories–FIX 8.0.32 HIGH8.8Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:21 UTCby GitHub Advisories–FIX 8.0.32 MEDIUM5.3Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Package2026-10-13 19:21 UTCby GitHub Advisories–FIX 9.0.21 HIGH7.5Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service VulnerabilityMicrosoft.NETCore.App.Runtime.linux-armRuntime2026-10-13 19:21 UTCby GitHub Advisories–FIX 10.0.13 HIGH8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityMicrosoft.AspNetCore.Components.WebAssembly.ServerPackage2026-10-13 19:21 UTCby GitHub Advisories–FIX 10.0.13 MEDIUM6.5Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:21 UTCby GitHub Advisories–FIX 9.0.21 HIGH8.8Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:21 UTCby GitHub Advisories–FIX 10.0.13 HIGH7.4Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilitySystem.Security.Cryptography.XmlPackage2026-10-13 19:21 UTCby GitHub Advisories–FIX 8.0.5 CRITICAL9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armPackage2026-10-13 19:21 UTCby GitHub Advisories–FIX 8.0.32 HIGH8.8Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:21 UTCby GitHub Advisories–FIX 9.0.21 MEDIUM5.9Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure VulnerabilityMicrosoft.Native.Quic.MsQuic.SchannelPackage2026-10-13 19:21 UTCby GitHub Advisories–FIX 2.5.12 HIGH7.5Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service VulnerabilitySystem.Security.Cryptography.PkcsPackage2026-10-13 19:20 UTCby GitHub Advisories–FIX 10.0.13 HIGH8.8Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:19 UTCby GitHub Advisories–FIX 11.0.0-rc.2 HIGH8.1Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.NETCore.App.Runtime.win-arm64Runtime2026-10-13 19:19 UTCby GitHub Advisories–FIX 8.0.32 MEDIUM5.9Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 8.0.32 MEDIUM6.5Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass VulnerabilityMicrosoft.NETCore.App.Runtime.linux-armPackage2026-10-13 19:19 UTCby GitHub Advisories–FIX 11.0.0-rc.2 CRITICAL9.1Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 11.0.0-rc.2 HIGH7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 8.0.32 HIGH7.5Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armPackage2026-10-13 19:19 UTCby GitHub Advisories–FIX 8.0.32 HIGH7.5Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 9.0.21 HIGH7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft.AspNetCore.Authentication.NegotiatePackage2026-10-13 19:19 UTCby GitHub Advisories–FIX 10.0.13 HIGH8.1Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft.AspNetCore.App.Runtime.linux-armRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 9.0.21 HIGH8.8Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Package2026-10-13 19:19 UTCby GitHub Advisories–FIX 8.0.32 MEDIUM5.9Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service VulnerabilitySystem.Security.Cryptography.PkcsPackage2026-10-13 19:19 UTCby GitHub Advisories–FIX 10.0.13 HIGH7.5Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.SignalR.CommonRuntime2026-10-13 19:19 UTCby GitHub Advisories–FIX 10.0.13 HIGH8.8Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:19 UTCby GitHub Advisories–FIX 10.0.13 HIGH8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft.WindowsDesktop.App.Runtime.win-arm64Runtime2026-10-13 19:19 UTCby GitHub Advisories–FIX 9.0.21 HIGH7.5Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityMicrosoft.NETCore.App.Runtime.linux-armRuntime2026-10-13 19:18 UTCby GitHub Advisories–FIX 9.0.21 MEDIUM5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityMicrosoft.NETCore.App.Runtime.linux-armRuntime2026-10-13 19:18 UTCby GitHub Advisories–FIX 9.0.21 HIGH7.5Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityMicrosoft.NETCore.App.Runtime.linux-armRuntime2026-10-13 19:18 UTCby GitHub Advisories–FIX 9.0.21 HIGH8.8Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution VulnerabilityMicrosoft.AspNetCore.Components.WebAssembly.ServerPackage2026-10-13 19:17 UTCby GitHub Advisories–FIX 10.0.13 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in sysdiagd (PyPI)sysdiagdPackage2026-10-13 18:40 UTCby osv-malicious–UNINSTALL HIGHINCIDENTCloudflare: Cloudflare Service IssuesCloudflareVendor2026-10-13 17:24 UTCby status page–WHAT TO DO CRITICAL10.0Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationgithub.com/containers/podmanPackage2026-09-29 15:26 UTCby EPSS–WHAT TO DO HIGH7.7FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module in github.com/dunglas/frankenphpgithub.com/dunglas/frankenphpRuntime2026-07-18 13:45 UTCby EPSS–FIX 1.12.5 CRITICAL9.9Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks in github.com/argoproj/argo-cdgithub.com/argoproj/argo-cdInfrastructure2026-10-07 15:58 UTCby EPSS–WHAT TO DO LOWINCIDENTDigitalOcean: App Platform DeploymentsDigitalOceanVendor2026-10-13 17:09 UTCby status page–WHAT TO DO HIGHINCIDENTHashiCorp: Terraform Runs FailingHashiCorpVendor2026-10-13 16:01 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: Cloudflare Workers - Cron Trigger Activation IssuesCloudflareVendor2026-10-13 15:18 UTCby status page–WHAT TO DO MEDIUM6.5SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgogithub.com/drakkan/sftpgoPackage2026-07-17 17:01 UTCby EPSS–FIX 2.7.5 MEDIUM4.3SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgogithub.com/drakkan/sftpgoPackage2026-09-19 07:04 UTCby EPSS–FIX 2.7.6 MEDIUM5.3Gotify: Insufficiently Protected Password Change endpoint in github.com/gotify/servergithub.com/gotify/serverPackage2026-07-24 11:18 UTCby EPSS–WHAT TO DO MEDIUM4.3obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fieldsobsidian-tcAI agents & MCP2026-07-03 05:43 UTCby GitHub Advisories–FIX 1.3.1 MEDIUM4.7obsidian-tc : Symlink read-ACL scope bypass via lexical path checksobsidian-tcAI agents & MCP2026-07-03 05:43 UTCby GitHub Advisories–FIX 1.3.1 LOW3.7fastify is vulnerable to header validation bypass via case-sensitive propertyNamesfastifyPackage2026-10-13 06:51 UTCby GitHub Advisories–FIX 5.12.6 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @chatest/baileys (npm)@chatest/baileysPackage2026-10-13 12:15 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCloudflare: Audit Logs v2 ingestion is missing multiple Cloudflare productsCloudflareVendor2026-10-13 10:14 UTCby status page–WHAT TO DO MEDIUMINCIDENTFly.io: Historical logs are currently delayedFly.ioVendor2026-10-13 09:25 UTCby status page–WHAT TO DO MEDIUMINCIDENTOpenAI: Degraded performance in GPT-6.1 Sol Codex and Work modeOpenAIVendor2026-10-13 08:10 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in brass-common (npm)brass-commonPackage2026-10-13 07:45 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCloudflare: Network performance issues in Ashburn, US (IAD)CloudflareVendor2026-10-13 04:00 UTCby status page–WHAT TO DO CRITICAL10.0EXPLOITEDGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5,…GitLab Community Edition and Enterprise Edition5 talkingVendor2026-10-13 02:17 UTCby EPSS5talkingFIX 19.2.8 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @user-interface-common/common-styles (npm)@user-interface-common/common-stylesPackage2026-10-13by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mntv-analysis/ui (npm)@mntv-analysis/uiPackage2026-10-13by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in monkey-tags-ip (npm)monkey-tags-ipPackage2026-10-13by osv-malicious–UNINSTALL HIGH8.8EXPLOITEDImproper neutralization of special elements used in a command ('command injection') in Windows Shell allows an…Microsoft WindowsVendor2026-10-13by InfraStack Analyst–FIX 10.0.26100.9711 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mntv-analysis/workspaces-components (npm)@mntv-analysis/workspaces-componentsPackage2026-10-13by osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @mntv-analysis/ui-components (npm)@mntv-analysis/ui-componentsPackage2026-10-13by osv-malicious–UNINSTALL CRITICAL8.6EXPLOITEDivanti connect secure: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute…ivanti connect secure3 talkingVendor2026-10-13by PoC on GitHub3talkingFIX 25.1.1.2

Monday, Oct 12Tuesday, Oct 13Wednesday, Oct 14