Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
30 / 1150 results
highbug_reportVulnerabilityPHP Windows packages ship Brotli RCE flaw via cURL auto-decompression
PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12 official Windows builds (pre-rebuild). Affects systems using cURL extension with CURLOPT_ENCODING enabled or HTTP client libraries like Guzzle (default behavior) that enable automatic Brotli decompression.
criticalbug_reportVulnerabilityCritical Brotli buffer overflow (CVE-2026-111497) enables RCE in Node.js
Brotli C decoder library versions 1.0.3–1.0.9, 1.1.0, and 1.2.0. Affects Node.js (versions prior to 22.23.4, 24.22.1, 26.12.1), Python HTTP clients (urllib3[brotli], requests, httpx, aiohttp[speedups]), .NET, and any application decompressing attacke…
criticalbug_reportVulnerabilityCritical Brotli decoder flaw in .NET enables RCE via crafted streams
Microsoft .NET 8, 9, 10, and 11 RC3. Applications using ASP.NET Core request decompression, HttpClient automatic response decompression, or System.IO.Compression Brotli APIs are vulnerable.
criticalbug_reportVulnerabilityWasmtime sandbox escape flaws allow malicious WebAssembly code execution
Wasmtime WebAssembly runtime: CVE-2026-115889 affects all architectures in versions before 36.0.19 and 37.0.0–42.x; CVE-2026-115893 affects ARM64/aarch64 only in versions before 36.0.19, 37.0.0–47.x, 48.0.0–48.0.6, and 49.0.0–49.0.3.
criticalbug_reportVulnerabilityPHP2Shell RCE flaws (CVE-2026-109618/109619) confirmed exploited in wild
PHP 8.4.26 and likely earlier versions. Affects approximately 70% of websites globally (~5.1 million exposed PHP hosts). Confirmed exploitation against Apache mod_php installations.
highbug_reportVulnerabilityMicrosoft 365 AitM campaign compromises 97 accounts via token replay
Microsoft 365 / Entra ID users across 79 organizations. Campaign active July 14 - September 22, 2026. 497 successful sign-ins from 200,000+ attempts originating from 193.26.115.0/24 IP range. 48 rogue Entra devices registered.
criticalbug_reportVulnerabilityCritical RCE in ISC BIND 9 DNS software requires immediate patching
ISC BIND 9 DNS software. Specific vulnerable versions not disclosed in available information. Affects organizations running BIND DNS servers.
highbug_reportVulnerabilityAI coding agents tricked into installing malware via planted instruction files
AI coding agents including OpenAI Codex and Anthropic Claude Code. Developers running agents in ~/Downloads folder are at risk. Attack leverages AGENTS.md/CLAUDE.md instruction files to install malicious npm package function-color (part of MALFEX cam…
highbug_reportVulnerabilityUnpatched Tailscale SSH flaws enable root escalation via port forwarding
Tailscale version 1.104.2 and headscale version 0.29.5. Affects networks with Tailscale SSH enabled and port forwarding configured. Headscale 0.29.5 cannot disable forwarding, making all SSH grants potentially exploitable.
highbug_reportVulnerabilityMalicious AGENTS.md files hijack AI coding agents via Downloads folder
AI coding agents including OpenAI Codex, Claude Code, and Cursor CLI when launched from ~/Downloads directory. Browsers Chrome, Edge, and Firefox allow silent file downloads to this location.
criticalbug_reportVulnerabilityCritical vulnerabilities in HPE Networking AOS require immediate patching
HPE Networking AOS (ArubaOS-Switch). Specific affected versions not disclosed in available information. Multiple critical-severity vulnerabilities reported by CERT.BE.
highbug_reportVulnerabilityBrotli decoder memory corruption enables RCE in Node.js, Bun, Python, Envoy
Google Brotli C library 1.0.3–1.2.0; Node.js 22.x, 24.x, 26.x (pre-patch); Bun ≤1.4.3; Envoy 1.36–1.39 (if Brotli enabled); Istio 1.29–1.31 (if Brotli enabled); Python Brotli ≤1.2.0 and brotlicffi ≤1.2.0.x; cdxgen ≤13.4.0/12.8.8.
criticalbug_reportVulnerabilityLiteLLM supply chain attack via leaked master key compromised v1.107.0
LiteLLM Python package version 1.107.0 (published October 21, 2026 to PyPI, Docker Hub, and GHCR). Threat actor gained owner-level access to BerriAI GitHub organization via unrevoked master key exposed May 27, 2026.
highbug_reportVulnerabilityAbandoned Popcorn Time fork updater posed botnet risk to 2-3M systems
Time4Popcorn (abandoned Popcorn Time fork): Windows versions ≤6.2.1.18, Mac ≤6.2.1.17, Android ≤3.5.0.173. Updater.exe ran with SYSTEM/root privileges, checked for updates over unencrypted HTTP to abandoned domains.
criticalbug_reportVulnerabilityCISA: Collabora Online and Arista VeloCloud flaws exploited in wild
Collabora Online Built-in CODE Server (richdocumentscode) within NextCloud platform, fixed in version 26.4.303 (September 2026). Arista VeloCloud Orchestrator on-premise versions, fixed in 5.2.3.18, 6.1.3.10, and 6.4.2.12 (October 2026).
highbug_reportVulnerabilityTime4Popcorn updater flaw enabled RCE with elevated privileges
Time4Popcorn app (Popcorn Time fork), all versions with vulnerable updater mechanism. Millions of devices potentially affected. Application is abandoned and no longer maintained.
criticalbug_reportVulnerabilityLiteLLM 1.107.0 supply chain attack steals credentials via Python hooks
LiteLLM version 1.107.0 distributed via PyPI and official container images on October 21, 2026. Affects any Python environment where the compromised package was installed, including developer workstations, CI/CD agents, test systems, containers, and…
criticalbug_reportVulnerabilityRuby patches Onigmo regex RCE flaws exploited via GitLab untrusted input
Ruby versions 4.0.0–4.0.8, 3.4.0–3.4.11, and 3.3.0–3.3.12. Ruby 3.2 and earlier (EOL) will not receive patches. GitLab versions 7.0+ were affected; patched in 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13.
highbug_reportVulnerabilityPHP RCE flaw CVE-2026-115560 affects rare configs, no patch yet
PHP installations with non-default session configuration: session.serialize_handler set to php_binary or php_serialize, then switched to php at runtime via ini_set() before session_start(), and session upload progress enabled.
highbug_reportVulnerabilityThreat actor k0t exploits Fortinet and Palo Alto firewalls, exposes 70K creds
Fortinet FortiGate and FortiWeb firewalls, Palo Alto Networks GlobalProtect, PAN-OS, and Prisma Access. Exploited vulnerabilities: CVE-2025-64446 (FortiWeb path traversal) and CVE-2026-0257 (PAN-OS/Prisma Access authentication bypass).
criticalbug_reportVulnerabilityHPE patches 8 critical auth bypass and RCE flaws in ArubaOS
Aruba Operating System (ArubaOS) versions AOS-8 and AOS-10, affecting Aruba Networking mobility conductors, access points, controllers, and gateway devices.
highbug_reportVulnerabilityPHP warns of unpatched RCE flaw affecting uncommon configurations
PHP web applications with specific configuration: session.serialize_handler set to php_binary or php_serialize, then changed to php via ini_set() before session_start(), with session upload progress enabled.
highbug_reportVulnerability11 critical flaws in CGM CLININET enable RCE and data theft
CGM CLININET healthcare software: all versions before 2026.MS3 affected by most vulnerabilities. CVE-2025-30049 fixed in 2026.MS1 and 2026.MS3. Multiple vulnerabilities (CVE-2025-30045, CVE-2025-30046, CVE-2025-30052, CVE-2025-30053, CVE-2025-30054,…
criticalbug_reportVulnerabilityPillow library RCE via EPS filename injection; upgrade to 13.0.0 required
Pillow versions 2.6.0 through 12.3.0. Affects Python applications processing EPS images with Ghostscript installed, particularly web upload endpoints that accept user-controlled filenames.
criticalbug_reportVulnerabilityNode.js Brotli RCE (CVE-2026-111497) exploited via crafted compression data
Node.js versions 22.x, 24.x, and 26.x on all architectures. Confirmed RCE on 24.22.0 Linux arm64. Applications decoding untrusted Brotli data via fetch() responses or request body middleware (Express 5.x body parsers, body-parser 2.x) are vulnerable.…
highbug_reportVulnerabilityx402 SDK flaws let malicious APIs drain AI agent wallets, bypass payments
x402 SDKs (TypeScript, Python, Go) prior to August 18, 2024 releases. Specifically: @x402/core, @x402/svm, @x402/extensions, @x402/fetch, @x402/axios versions before 2.23.0 (TypeScript); Python package before 2.25.0; Go module before v2.28.0.
highbug_reportVulnerabilityPHP2Shell RCE flaws exploited to deploy Mirai botnet, attacks unsuccessful
PHP versions prior to 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Vulnerabilities CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2) enable unauthenticated remote code execution via crafted HTTP requests.
criticalbug_reportVulnerabilityLiteLLM PyPI and Docker supply chain attack delivers credential stealer
LiteLLM version 1.107.0 on PyPI (all seven .whl packages for Windows, Linux, macOS) and Docker images (v1.107.0, latest, main-latest, main-stable) on Docker Hub and GHCR. Attack window: October 21, 2026, 11:39–14:20 UTC.
criticalbug_reportVulnerabilityArista VeloCloud Orchestrator SQL injection zero-day under active exploit
Arista VeloCloud Orchestrator (VCO) versions before 5.2.3.18, 6.1.3.10, and 6.4.2.12. On-premises deployments affected; Hosted and Dedicated orchestrators already patched. VeloCloud Gateway and Edge devices not affected.
criticalbug_reportVulnerabilityeMudhra CA exits SSL/TLS business after 8 intermediate keys found guessable
eMudhra certificate authority: 8 intermediate CA private keys compromised (6 for TLS). Approximately 30,800 unexpired certificates chained to emSign ECC Root CA - G3, 99.9% issued through InCommon (higher education).