Skip to content

← Vulnerabilities of the week

Vulnerabilities of the week: October 26 – November 1, 2026

The week’s top vulnerabilities: what they are and how they could harm you. Open an explanation to see who is affected and what to do.

#1 · CVE-2026-97229
GitLab
attacks observed · public exploit on GitHub · public exploit available · Nuclei template · KEV: attacks observed in the wild · CVSS 10 · EPSS: 69.3% chance of an attack attempt in the next 30 days
What this is
GitLab does not properly check a specially crafted text-matching pattern in its configuration. Under certain conditions, this can let someone run their own program on the GitLab server.
How it can harm you
Someone connecting over the network could run their own program on your GitLab server without signing in or needing you to do anything. The exact additional conditions needed are not specified.
Read the explanation →
#2 · CVE-2026-48356
Adobe Commerce, Adobe Commerce B2B, Adobe Magento Open Source, Adobe Commerce Events
attacks observed · public exploit on GitHub · KEV: attacks observed in the wild · CVSS 9.3 · EPSS: 47.5% chance of an attack attempt in the next 30 days
What this is
Adobe Commerce has a flaw that allows dangerous types of files to be uploaded. This can let an attacker run their own program with the current user's permissions.
How it can harm you
An attacker does not need to sign in, but the victim must open a malicious link or interact with a compromised web page. The attacker could run their own program with the current user's permissions and potentially gain greater access or control over the victim's account or session.
Read the explanation →
#3 · CVE-2026-109618
PHP, Siemens AMIS TS, Siemens AX4, Siemens blueplanet 360 NX3 M6 WM OD IISX, Siemens blueplanet 360 NX3 M6 WM OD IISX - S, Siemens Building X, Siemens CADRA, Siemens Call stations, Siemens Capital, Siemens Chargesight, Siemens Climatix Cloud IC, Siemens Climatix Devices, Siemens Connect Insights, Siemens Connect X200, Siemens Connect X300, Siemens Connect X500, Siemens cRSP, Siemens Depotfinity, Siemens Designcenter, Siemens Designcenter X, Siemens Designcenter X Essentials, Siemens Desigo CC, Siemens Desigo DXR2, Siemens Desigo DXR3, Siemens Desigo Optic, Siemens Desigo PXC3, Siemens Desigo PXC4, Siemens Desigo PXC5, Siemens Desigo PXC7, Siemens DFMExpress, Siemens Energy Engage V2.0SP9, Siemens Energy Engage V3.1SP1, Siemens Energy Management System, Siemens Enlighted RTLS, Siemens Enlighted Space, Siemens Heliox Flex Pro, Siemens Heliox H60, Siemens Heliox Rapid, Siemens HyperLynx, Siemens Insights Hub, Siemens Local Monitoring bt-monitoring-vm, Siemens Navigator E&S, Siemens Novigo VANSYS, Siemens Novigo VANSYS core, Siemens Opcenter Connect Electronics, Siemens Opcenter Connect MOM, Siemens Opcenter Execution Core, Siemens Opcenter Execution Discrete, Siemens Opcenter Execution Foundation, Siemens Opcenter Execution Pharma, Siemens Opcenter Execution Process, Siemens Opcenter Intelligence, Siemens Opcenter Intra Plant Logistics, Siemens Opcenter Quality, Siemens Opcenter RDnL, Siemens Opcenter X, Siemens PACE-Design, Siemens PADS Pro Essentials, Siemens PADS Pro Student Edition, Siemens PADS Professional, Siemens PADS Professional - XCR, Siemens PADS Standard - XCR, Siemens PADS Standard & Standard Plus, Siemens Pathway to Learning Engineering, Siemens Polarion, Siemens QuadView, Siemens RUGGEDCOM APE1808, Siemens Sicharge D, Siemens Sicharge D Configuration Backend, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Control, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens Simcenter Flomaster, Siemens Simcenter Flux, Siemens Simcenter Simlab, Siemens Sinteso FS20 EN, Siemens SiPass integrated, Siemens SIPORT, Siemens Siveillance Control, Siemens Siveillance Control Pro, Siemens Siveillance Intrusion, Siemens Siveillance Video, Siemens Solid Edge, Siemens Spectrum Power 4, Siemens Spectrum Power 7, Siemens Spectrum Power TG, Siemens Supply Chain Suite, Siemens Teamcenter, Siemens Teamcenter Product Cost Management, Siemens Teamcenter Share, Siemens Teamcenter Visualization, Siemens Tecnomatix Plant Simulation, Siemens TestWay, Siemens Valor NPI, Siemens Verischarge, Siemens VersiCloudHeliox Dual Port 60kW, Siemens Voice alarm panels, Siemens Voice alarm systems and audio matrices, Siemens Workplace Experience, Siemens Xcargo, Siemens Xpedition Designer, Siemens Xpedition Enterprise, Siemens Xpedition Enterprise XCR, Siemens Xpedition IC Packaging, Siemens Xpedition Layout Browser
attacks observed · public exploit available · public exploit on GitHub · Nuclei template · KEV: attacks observed in the wild · CVSS 9.2 · EPSS: 100.0% chance of an attack attempt in the next 30 days
What this is
PHP can mishandle memory when a request runs out of memory. While cleaning up the request, it may use memory that was not properly prepared, allowing an attacker to run their own program.
How it can harm you
An attacker can reach PHP over a network and make it run their own program on the server, without signing in or requiring anyone to act. The attack is difficult and depends on specially triggered memory exhaustion and additional conditions whose exact details are unknown.
Read the explanation →
#4 · CVE-2026-109619
PHP, Siemens AMIS TS, Siemens AX4, Siemens blueplanet 360 NX3 M6 WM OD IISX, Siemens blueplanet 360 NX3 M6 WM OD IISX - S, Siemens Building X, Siemens CADRA, Siemens Call stations, Siemens Capital, Siemens Chargesight, Siemens Climatix Cloud IC, Siemens Climatix Devices, Siemens Connect Insights, Siemens Connect X200, Siemens Connect X300, Siemens Connect X500, Siemens cRSP, Siemens Depotfinity, Siemens Designcenter, Siemens Designcenter X, Siemens Designcenter X Essentials, Siemens Desigo CC, Siemens Desigo DXR2, Siemens Desigo DXR3, Siemens Desigo Optic, Siemens Desigo PXC3, Siemens Desigo PXC4, Siemens Desigo PXC5, Siemens Desigo PXC7, Siemens DFMExpress, Siemens Energy Engage V2.0SP9, Siemens Energy Engage V3.1SP1, Siemens Energy Management System, Siemens Enlighted RTLS, Siemens Enlighted Space, Siemens Heliox Flex Pro, Siemens Heliox H60, Siemens Heliox Rapid, Siemens HyperLynx, Siemens Insights Hub, Siemens Local Monitoring bt-monitoring-vm, Siemens Navigator E&S, Siemens Novigo VANSYS, Siemens Novigo VANSYS core, Siemens Opcenter Connect Electronics, Siemens Opcenter Connect MOM, Siemens Opcenter Execution Core, Siemens Opcenter Execution Discrete, Siemens Opcenter Execution Foundation, Siemens Opcenter Execution Pharma, Siemens Opcenter Execution Process, Siemens Opcenter Intelligence, Siemens Opcenter Intra Plant Logistics, Siemens Opcenter Quality, Siemens Opcenter RDnL, Siemens Opcenter X, Siemens PACE-Design, Siemens PADS Pro Essentials, Siemens PADS Pro Student Edition, Siemens PADS Professional, Siemens PADS Professional - XCR, Siemens PADS Standard - XCR, Siemens PADS Standard & Standard Plus, Siemens Pathway to Learning Engineering, Siemens Polarion, Siemens QuadView, Siemens RUGGEDCOM APE1808, Siemens Sicharge D, Siemens Sicharge D Configuration Backend, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Control, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens Simcenter Flomaster, Siemens Simcenter Flux, Siemens Simcenter Simlab, Siemens Sinteso FS20 EN, Siemens SiPass integrated, Siemens SIPORT, Siemens Siveillance Control, Siemens Siveillance Control Pro, Siemens Siveillance Intrusion, Siemens Siveillance Video, Siemens Solid Edge, Siemens Spectrum Power 3, Siemens Spectrum Power 4, Siemens Spectrum Power 7, Siemens Spectrum Power TG, Siemens Supply Chain Suite, Siemens Teamcenter, Siemens Teamcenter Product Cost Management, Siemens Teamcenter Share, Siemens Teamcenter Visualization, Siemens Tecnomatix Plant Simulation, Siemens TestWay, Siemens Valor NPI, Siemens Verischarge, Siemens VersiCloudHeliox Dual Port 60kW, Siemens Voice alarm panels, Siemens Voice alarm systems and audio matrices, Siemens Workplace Experience, Siemens Xcargo, Siemens Xpedition Designer, Siemens Xpedition Enterprise, Siemens Xpedition Enterprise XCR, Siemens Xpedition IC Packaging, Siemens Xpedition Layout Browser
attacks observed · public exploit on GitHub · Nuclei template · KEV: attacks observed in the wild · CVSS 9.2 · EPSS: 100.0% chance of an attack attempt in the next 30 days
What this is
PHP can keep referring to memory after it has been released. Later requests can use these outdated references, allowing an attacker to run their own program on the server.
How it can harm you
An attacker can act over a network without signing in or needing anyone to interact with the attack. Exploitation is complex and requires additional conditions that are not specified. If successful, the attacker can run their own program, read or change data, or stop the affected program.
Read the explanation →
#5 · CVE-2026-111497
Google Brotli, Siemens Calibre, Siemens Calibre ICE, Siemens Capital, Siemens Cloud Connector Configurator, Siemens Common Configurator (CC on IEM), Siemens Common Configurator on Device (CC on Edge), Siemens COMOS Walkinside, Siemens Data Flow Monitoring, Siemens Databus Configurator, Siemens DataXess Configurator, Siemens Designcenter X Essentials, Siemens Desigo CC family V8, Siemens Desigo CC family V9, Siemens Edge OPC UA Server Configurator, Siemens Flow Creator Configurator, Siemens gDAP (gPROMS Digital Application Platform), Siemens Gridscale X DSA, Siemens Gridscale X PSS®E, Siemens Heliox Dual Port 60kW, Siemens Heliox Flex Pro, Siemens HyperLynx, Siemens Industrial Edge Hub, Siemens Industrial Edge Management Cloud, Siemens Innexis Architecture Native Acceleration 2026, Siemens Insights Hub, Siemens Opcenter Connect Electronics, Siemens Opcenter Connect MOM, Siemens Opcenter Execution Core, Siemens Opcenter Execution Discrete, Siemens Opcenter Execution Foundation, Siemens Opcenter Execution Pharma, Siemens Opcenter Execution Process, Siemens Opcenter Intelligence, Siemens Opcenter Intra Plant Logistics, Siemens Opcenter Quality, Siemens Opcenter RDnL, Siemens Opcenter X, Siemens PADS Pro Essentials, Siemens PADS Pro Student Edition, Siemens PADS Professional, Siemens Pathway to Learning Engineering, Siemens PAVE360 Automotive 2026, Siemens Polarion, Siemens Process Preparation X, Siemens Project Server Web Administration Tool, Siemens SICHARGE FLEX, Siemens SICHARGE UC, Siemens Sifinity Go, Siemens Sifinity Setup, Siemens SIMATIC BRAUMAT, Siemens SIMATIC Profiling Tool, Siemens SIMATIC SISTAR, Siemens SIMATIC WinCC Companion, Siemens SIMATIC WinCC OA V3.20, Siemens SIMATIC WinCC OA V3.21, Siemens SIMATIC WinCC Runtime Professional, Siemens SIMATIC WinCC Unified for Industrial Edge, Siemens SIMATIC WinCC Unified PC Runtime, Siemens SIMATIC WinCC Unified SIQENCE, Siemens SIMATIC WinCC V7/V8, Siemens Simcenter Executable Digital Twin, Siemens Simcenter Studio, Siemens Solid Edge, Siemens Teamcenter Share, Siemens Teamcenter V2412, Siemens Teamcenter V2506, Siemens Teamcenter V2512, Siemens Teamcenter V2606, Siemens TIA Administrator, Siemens User Management Component (UMC), Siemens VersiCharge AC Series, Siemens VersiCloud, Siemens Xpedition Designer, Siemens Xpedition Enterprise, Siemens RUGGEDCOM APE1808, brotli, brotlicffi
attacks observed · public exploit on GitHub · KEV: attacks observed in the wild · CVSS 9.2 · EPSS: 82.6% chance of an attack attempt in the next 30 days
What this is
Brotli from Google unpacks compressed data. A specially crafted compressed stream can make it write beyond its intended space in memory.
How it can harm you
If an affected program processes a specially crafted compressed stream, an attacker can damage its internal memory, expose sensitive information held there, stop the program, or potentially run their own program on the server. No sign-in or user interaction is required, but additional conditions are needed and are not specified.
Read the explanation →
#6 · CVE-2026-76418
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software
attacks observed · KEV: attacks observed in the wild · CVSS 8.6 · EPSS: 0.8% chance of an attack attempt in the next 30 days
What this is
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software have a flaw in their remote access service. A specially crafted connection request can unexpectedly restart the device.
How it can harm you
An attacker can restart the device remotely without signing in or needing anyone to act, interrupting its service. This requires a second authentication check to be configured for the connection group.
Read the explanation →
#7 · CVE-2026-119977
WordPress
attacks observed · public exploit on GitHub · KEV: attacks observed in the wild · CVSS 8.1 · EPSS: 1.2% chance of an attack attempt in the next 30 days
What this is
WordPress uses predictable temporary storage locations that can be reached over the Internet while its core is being fully updated. This can let an outsider run their own program on the server during the update.
How it can harm you
An attacker does not need to sign in or persuade you to do anything, but must reach the server while the update is taking place and meet difficult attack conditions. They could run their own program on your server. The exact permissions that program would have are not specified.
Read the explanation →
#8 · CVE-2026-46300
Linux, Red Hat NVIDIA for RHEL 10, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat OpenShift Container Platform 4.21, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
attacks observed · public exploit available · public exploit on GitHub · KEV: attacks observed in the wild · CVSS 7.8 · EPSS: 16.1% chance of an attack attempt in the next 30 days
What this is
Linux can lose track of which parts of network data share memory with stored file data. When encrypted traffic is processed later, that stored data can be overwritten by mistake.
How it can harm you
Someone who already has limited local access could read private data, change stored data or stop the server from working properly. The fault involves processing encrypted traffic through shared memory; the exact steps and additional conditions needed are unknown.
Read the explanation →
#9 · CVE-2026-118527
Ivanti Connect Secure
attacks observed · KEV: attacks observed in the wild · CVSS 4.3 · EPSS: 0.8% chance of an attack attempt in the next 30 days
What this is
Ivanti Connect Secure uses predictable filenames. This lets an attacker upload files containing content they choose to a known location on disk.
How it can harm you
An attacker who can sign in can upload files of their choosing over a network to a known location on your server’s disk. The account permissions needed beyond signing in are not specified.
Read the explanation →

Check your server for free →