1. Executive summary Rapid7's Metasploit Framework release of 2026-10-23 adds eleven modules, six of which target Langflow, the open-source LLM workflow
1. Executive summary CVE-2026-73570 is an unauthenticated OS command injection flaw in Synacor Zimbra Collaboration Suite (ZCS), rated CVSS 8.9 HIGH (CWE-78)
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1378 on 23 October 2026 covering multiple vulnerabilities across IBM AIX, VIOS, Cognos Analytics, Db2, QRadar
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1376 on 23 October 2026 covering multiple vulnerabilities in the Ubuntu Linux kernel, affecting every supported
1. Executive summary CERT-FR published an advisory on 23 October 2026 covering multiple vulnerabilities in the Debian Linux kernel, affecting Debian 13 trixie at versions
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1371 on 23 October 2026 covering multiple vulnerabilities in Microsoft Edge versions earlier than 156.0.
1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1368 on 23 October 2026 covering a vulnerability in Mattermost Server versions 11.7.x earlier
1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-4126 on 23 October 2026, rating multiple vulnerabilities in the MongoDB C# driver
1. Executive summary A credential-harvesting campaign tracked as FortiBleed has extracted configuration files from internet-facing Fortinet FortiGate firewalls and cracked the stored administrator hashes,
1. Executive summary HPE Aruba published two security bulletins on 22 October 2026 covering multiple vulnerabilities in ArubaOS (AOS) and ClearPass Policy Manager (CPPM), and CERT-
1. Executive summary A high-severity vulnerability in PHP has been patched by PHP.net and by multiple downstream vendors in a coordinated disclosure, and SANS
1. Executive summary Symantec has attributed attacks on a law enforcement agency, a naval shipbuilder and a military aircraft engine manufacturer in two NATO member states