https://redteammonitor.com/c/vulnerabilities/pillow-13-0-0-patch-stops-cve-2026-112895/RedTeam Monitoren2026-10-21T09:40:33ZPillow 13.0.0 Patch Stops CVE-2026-112895 RecursionError DoS in PDF Appendshttps://redteammonitor.com/c/vulnerabilities/mcp-sdk-1-32-0-enforces-session-tied-tasks-to/RedTeam Monitoren2026-10-21T09:11:36ZMCP SDK 1.32.0 Enforces Session-Tied Tasks to Block Cross-Client Access in CVE-2026-111767https://redteammonitor.com/c/vulnerabilities/pillow-jpeg-flaw-lets-attackers-write-past-memory/RedTeam Monitoren2026-10-21T08:56:43ZPillow JPEG Flaw Lets Attackers Write Past Memory Bounds in v12.3.0https://redteammonitor.com/c/vulnerabilities/php2shell-leaks-expose-critical-rce-flaws-ahead/RedTeam Monitoren2026-10-21T08:05:11ZPHP2Shell Leaks Expose Critical RCE Flaws Ahead of October Patch Releasehttps://redteammonitor.com/c/vulnerabilities/public-exploit-targets-tenda-ac19-router-firmware/RedTeam Monitoren2026-10-21T07:34:55ZPublic exploit targets Tenda AC19 router firmware for remote controlhttps://redteammonitor.com/c/vulnerabilities/hkuds-vibe-trading-0-1-7-flaw-lets-attackers/RedTeam Monitoren2026-10-21T07:16:37ZHKUDS Vibe-Trading <0.1.7 Flaw Lets Attackers Execute Root Commands Without Credentialshttps://redteammonitor.com/c/vulnerabilities/aws-v1-0-11-patch-stops-serverless-ci-cd-pushers/RedTeam Monitoren2026-10-21T04:40:21ZAWS v1.0.11 Patch Stops Serverless CI/CD Pushers from Escalating Privileges via IAM Flawhttps://redteammonitor.com/c/vulnerabilities/totolink-x2000r-firmware-v1-0-0-b20250421-1327-2/RedTeam Monitoren2026-10-21T03:21:04ZTOTOLINK X2000R Firmware V1.0.0-B20250421.1327 Faces Critical CVE-2026-10131 Code Injection Riskhttps://redteammonitor.com/c/vulnerabilities/authenticated-attacker-can-execute-code-on/RedTeam Monitoren2026-10-21T02:50:16ZAuthenticated Attacker Can Execute Code on Totolink X2000R Routerhttps://redteammonitor.com/c/vulnerabilities/totolink-x2000r-firmware-v1-0-0-b20250421-1327/RedTeam Monitoren2026-10-21T01:06:46ZTotolink X2000R Firmware V1.0.0-B20250421.1327 Exposes Remote Code Execution via PPPoE HTTP Flawshttps://redteammonitor.com/c/vulnerabilities/nvd-adds-cve-2026-41222-totolink-x2000r-boa/RedTeam Monitoren2026-10-21T00:46:50ZNVD Adds CVE-2026-41222: TOTOLINK X2000R boa Server Stack Overflow Enables Post-Auth Code Executionhttps://redteammonitor.com/c/vulnerabilities/nvd-stack-overflow-in-totolink-x2000r-boa/RedTeam Monitoren2026-10-20T22:33:54ZNVD: Stack Overflow in Totolink X2000R boa formMapDelDevice Hostname Allows Authenticated RCEhttps://redteammonitor.com/c/cyber-attacks/dhs-bans-deepseek-ai-tools-halts-federal-agency/RedTeam Monitoren2026-10-20T19:41:51ZDHS Bans DeepSeek AI Tools, Halts Federal Agency Purchases Over National Security Riskshttps://redteammonitor.com/c/cyber-attacks/qilin-and-inc-target-industries-with-ransomware/RedTeam Monitoren2026-10-20T18:38:04ZQilin and Inc Target Industries With Ransomware Via Active Palo Alto VPN Auth Flawhttps://redteammonitor.com/c/vulnerabilities/threatbook-launches-redagents-to-coordinate/RedTeam Monitoren2026-10-20T11:15:04ZThreatBook Launches RedAgents to Coordinate Multiple AI Pentesting Toolshttps://redteammonitor.com/c/cyber-attacks/attacker-swapped-ovhcloud-cli-archives-to-steal/RedTeam Monitoren2026-10-20T10:33:52ZAttacker swapped OVHcloud CLI archives to steal local secrets in 94-minute GitHub exploithttps://redteammonitor.com/c/cyber-attacks/unc7017-faked-checksums-to-bypass-aomei-integrity/RedTeam Monitoren2026-10-20T06:37:42ZUNC7017 Faked Checksums to Bypass AOMEI Integrity Checks and Infect Global Victimshttps://redteammonitor.com/c/cyber-attacks/ftc-social-media-drives-42-jump-in-investment/RedTeam Monitoren2026-10-20T05:35:25ZFTC: Social media drives 42% jump in investment scams, seniors lose record $3Bhttps://redteammonitor.com/c/vulnerabilities/nvd-rates-ccc-attestation-tls-poc-relay-flaw/RedTeam Monitoren2026-10-20T03:31:39ZNVD Rates CCC Attestation TLS PoC Relay Flaw Critical CVE-2026-112377https://redteammonitor.com/c/vulnerabilities/pillow-13-0-0-patches-critical-eps-command/RedTeam Monitoren2026-10-20T02:50:14ZPillow 13.0.0 patches critical EPS command injection CVE-2026-112900 via safe Ghostscript path handlinghttps://redteammonitor.com/c/vulnerabilities/ning-compress-lzf-cve-2026-109395-crafted-data/RedTeam Monitoren2026-10-20T02:21:42ZNing compress-lzf CVE-2026-109395: Crafted Data Streams Crash JVMs and Leak Heap Memory Before 1.2.0https://redteammonitor.com/c/vulnerabilities/grav-api-cve-2026-112779-unauthenticated-users/RedTeam Monitoren2026-10-19T22:49:51ZGrav API CVE-2026-112779: Unauthenticated users drain storage, authenticated ones bypass rules pre-1.0.42https://redteammonitor.com/c/vulnerabilities/mercury-3-2-6-patches-cve-2026-111058-blocking/RedTeam Monitoren2026-10-19T22:30:40ZMercury 3.2.6 Patches CVE-2026-111058, Blocking Unauthenticated Python Code Execution on Servershttps://redteammonitor.com/c/vulnerabilities/mandiant-ties-sawfly-web-shell-deployments-to/RedTeam Monitoren2026-10-19T15:25:59ZMandiant ties SAWFLY web shell deployments to ARMORY CASTLE’s BeyondTrust Remote Support breachhttps://redteammonitor.com/c/vulnerabilities/apache-camel-vulnerability-allows-remote-code/RedTeam Monitoren2026-10-19T10:40:09ZApache Camel Vulnerability Allows Remote Code Execution via Deserialization