Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 45 threats · Thursday, Oct 15· last check 2026-11-04 07:47 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Thursday, Oct 15

Most severe in everything

EXPLOITED IN THE WILD

beyondtrust remote support: The vulnerability exists within internal components of BeyondTrust’s Remote Support productBeyondTrust Remote Support2 talking

EXPLOITED IN THE WILD

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8)Siemens Software Center

EXPLOITED IN THE WILD

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration…Ivanti Connect Secure4 talking

Amazon Neptune: Gremlin import lets an authenticated query user run code

Thursday, Oct 15

HIGH7.0EXPLOITEDIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration…Ivanti Connect Secure4 talkingVendor2026-10-15 21:17 UTCby InfraStack Analyst4talkingFIX 22.8R2.6 CRITICAL9.8EXPLOITEDbeyondtrust remote support: The vulnerability exists within internal components of BeyondTrust’s Remote Support productBeyondTrust Remote Support2 talkingVendor2026-10-15 21:17 UTCby InfraStack Analyst2talkingFIX BT26-05-RS patch (v24.3.1 - v26.2.3)MEDIUMINCIDENTRender: Dashboard not updating in real time; Some Workflows SDK requests timing outRenderVendor2026-10-15 20:58 UTCby status page–WHAT TO DO HIGHINCIDENTCloudflare: Network Performance Issues in Eastern North AmericaCloudflareVendor2026-10-15 20:48 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in proxyrobika (PyPI)proxyrobikaPackage2026-10-15 20:33 UTCby osv-malicious–UNINSTALL HIGH7.5undici vulnerable to Denial of Service via unhandled exception in the decompress interceptorundiciPackage2026-10-15 15:57 UTCby EPSS–FIX 7.30.1 HIGH7.5undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiationundiciPackage2026-10-15 15:58 UTCby EPSS–FIX 6.29.1 MEDIUM6.3ammonia: mXSS via MathML `annotation-xml` encoding stripammoniaPackage2026-07-01 12:50 UTCby GitHub Advisories–FIX 3.3.2 HIGH7.5undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG bufferingundiciPackage2026-10-15 15:57 UTCby EPSS–FIX 6.29.1 HIGH7.5undici vulnerable to Denial of Service via unbounded memory in the EventSource parserundiciPackage2026-10-15 16:01 UTCby EPSS–FIX 6.29.1 HIGH7.5undici vulnerable to Denial of Service via unhandled error on excessive content-encodingsundiciPackage2026-10-15 16:01 UTCby EPSS–FIX 6.29.1 HIGH7.5undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokensundiciPackage2026-10-15 15:59 UTCby EPSS–FIX 7.30.1 CRITICAL9.1undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsundiciPackage2026-10-15 15:59 UTCby EPSS–FIX 7.30.1 CRITICAL9.1undici vulnerable to TLS certificate validation bypass via dropped tls options in AgentundiciPackage2026-10-15 15:59 UTCby EPSS–FIX 6.29.1 MEDIUMINCIDENTGitHub: CCA Automations are delayed when starting an AutomationGitHubVendor2026-10-15 18:31 UTCby status page–WHAT TO DO HIGHINCIDENTCloudflare: Network Performance Issues in LondonCloudflareVendor2026-10-15 17:33 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: Pages.dev sites experiencing availability issues in NorwayCloudflareVendor2026-10-15 16:42 UTCby status page–WHAT TO DO HIGHINCIDENTOpenAI: Widespread feature degradationOpenAIVendor2026-10-15 16:29 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: Network Performance Issues in Kuala LumpurCloudflareVendor2026-10-15 16:27 UTCby status page–WHAT TO DO HIGH8.2kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with contentgithub.com/getkin/kin-openapiPackage2026-08-03 11:03 UTCby GitHub Advisories–FIX 0.146.0 MEDIUMINCIDENTCloudflare: Increased Errors for Durable ObjectsCloudflareVendor2026-10-15 15:37 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: DNS Update DelaysCloudflareVendor2026-10-15 15:33 UTCby status page–WHAT TO DO HIGH8.4EXPLOITEDA vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8)Siemens Software CenterVendor2026-10-15 15:17 UTCby InfraStack Analyst–FIX 4.0.9.8 HIGH8.7Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Processsymfony/symfonyPackage2026-10-15 06:58 UTCby EPSS–FIX 5.4.54 HIGH8.7Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Headersymfony/http-foundationPackage2026-10-15 06:58 UTCby EPSS–FIX 6.4.46 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in buyerdashboard (npm)buyerdashboardPackage2026-10-15 13:28 UTCby osv-malicious–UNINSTALL CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU…26 talkingInfrastructure2026-10-15 13:17 UTCby EPSS26talkingWHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in xapi-lib (npm)xapi-libPackage2026-10-15 13:07 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in web-pixels-manager (npm)web-pixels-managerPackage2026-10-15 13:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in idlive-face-capture-web-development (npm)idlive-face-capture-web-developmentPackage2026-10-15 12:04 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in proxy-rubikis (PyPI)proxy-rubikisPackage2026-10-15 11:35 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCloudflare: Increased HTTP 502 ErrorsCloudflareVendor2026-10-15 10:47 UTCby status page–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in py-wormgpt (PyPI)py-wormgptPackage2026-10-15 10:45 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in proxyrubika (PyPI)proxyrubikaPackage2026-10-15 10:35 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in getpubip (PyPI)getpubipPackage2026-10-15 10:13 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTFly.io: Elevated errors creating apps and managing secretsFly.ioVendor2026-10-15 09:30 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: Increased Errors for Durable Objects and Downstream Services in Western EuropeCloudflareVendor2026-10-15 09:18 UTCby status page–WHAT TO DO HIGH7.5undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshakeundiciPackage2026-10-14 15:48 UTCby EPSS–FIX 8.11.2 MALICIOUSDON'T INSTALLREMOVE ITMalicious code in py-worm (PyPI)py-wormPackage2026-10-15 08:29 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in py-sock2 (PyPI)py-sock2Package2026-10-15 08:20 UTCby osv-malicious–UNINSTALL MEDIUMINCIDENTCloudflare: Cloudflare Workers AI IssuesCloudflareVendor2026-10-15 07:10 UTCby status page–WHAT TO DO MEDIUMINCIDENTCloudflare: Degraded performance for Cloudflare Browser RunCloudflareVendor2026-10-15 05:57 UTCby status page–WHAT TO DO LOWINCIDENTFly.io: Partial FRA network issuesFly.ioVendor2026-10-15 02:55 UTCby status page–WHAT TO DO HIGH6.5Duplicate Advisory: Nodemailer: Quadratic (O(n^2)) DKIM header unfolding lets a large folded header cause remote denial of service during signingnodemailerPackage2026-10-15 00:31 UTCby GitHub Advisories–WHAT TO DO CRITICAL9.9Amazon Neptune: Gremlin import lets an authenticated query user run codeInfrastructure2026-10-15by EPSS–WHAT TO DO

Wednesday, Oct 14Thursday, Oct 15Friday, Oct 16