https://patchobserver.com/Your daily threat briefingenWed, 21 Oct 2026 00:31:13 +0000https://patchobserver.com/news/vulnerabilities/ibm-datastage-flaw-lets-attackers-bypass/https://patchobserver.com/news/vulnerabilities/ibm-datastage-flaw-lets-attackers-bypass/Wed, 21 Oct 2026 00:19:33 +0000VulnerabilitiesA critical vulnerability in IBM DataStage 5.4.0.0 allows unauthenticated users to write to shared Redis stores, collapsing credential encryption boundaries.https://patchobserver.com/news/vulnerabilities/critical-command-injection-flaw-in-totolink/https://patchobserver.com/news/vulnerabilities/critical-command-injection-flaw-in-totolink/Tue, 20 Oct 2026 21:42:42 +0000VulnerabilitiesA CVSS 9.1 critical vulnerability in specific Totolink firmware allows authenticated attackers to execute arbitrary code via crafted HTTP requests.https://patchobserver.com/news/vulnerabilities/apache-couchdb-3-5-3-fixes-high-severity/https://patchobserver.com/news/vulnerabilities/apache-couchdb-3-5-3-fixes-high-severity/Tue, 20 Oct 2026 20:30:28 +0000VulnerabilitiesA remote denial-of-service flaw in Apache CouchDB versions below 3.5.3 is fixed in the latest release, requiring immediate updates for exposed systems.https://patchobserver.com/news/vulnerabilities/apostrophe-cms-prototype-pollution-causes/https://patchobserver.com/news/vulnerabilities/apostrophe-cms-prototype-pollution-causes/Tue, 20 Oct 2026 18:27:36 +0000VulnerabilitiesA high-severity flaw in Apostrophe CMS allows low-privileged users to crash the entire Node process by deleting shared runtime methods via crafted requests.https://patchobserver.com/news/vulnerabilities/orgs-using-apache-tomcat-11-must-upgrade-to-11-0/https://patchobserver.com/news/vulnerabilities/orgs-using-apache-tomcat-11-must-upgrade-to-11-0/Tue, 20 Oct 2026 18:15:50 +0000VulnerabilitiesOrganizations running Apache Tomcat 11.0.0-M25 through 11.0.26 must upgrade to version 11.0.27 to address a critical buffer under-read flaw that risks data exposure.https://patchobserver.com/news/vulnerabilities/python-certifi-update-removes-emsign-root/https://patchobserver.com/news/vulnerabilities/python-certifi-update-removes-emsign-root/Tue, 20 Oct 2026 17:27:32 +0000VulnerabilitiesA critical update for the Python certifi library removes the emSign root certificate. Organizations using affected versions must review their dependencies.https://patchobserver.com/news/vulnerabilities/solarwinds-observability-self-hosted/https://patchobserver.com/news/vulnerabilities/solarwinds-observability-self-hosted/Tue, 20 Oct 2026 16:51:25 +0000VulnerabilitiesA high-severity broken authorization flaw in SolarWinds Observability Self-Hosted allows low-privileged users to access and modify information beyond permissions.https://patchobserver.com/news/vulnerabilities/stirling-pdf-administrators-face-high-risk-sql/https://patchobserver.com/news/vulnerabilities/stirling-pdf-administrators-face-high-risk-sql/Tue, 20 Oct 2026 16:19:56 +0000VulnerabilitiesAuthenticated admins can bypass import restrictions in Stirling-PDF using crafted SQL backups, allowing Java execution in versions up to 3.2.0.https://patchobserver.com/news/vulnerabilities/netx-secure-tls-1-3-parser-flaw-allows-pre-auth/https://patchobserver.com/news/vulnerabilities/netx-secure-tls-1-3-parser-flaw-allows-pre-auth/Tue, 20 Oct 2026 15:44:45 +0000VulnerabilitiesA high-severity vulnerability in NetX Secure enables remote attackers to trigger heap out-of-bounds reads during standard TLS handshakes.https://patchobserver.com/news/vulnerabilities/crass-ruby-gem-vulnerable-to-cpu-exhaustion-via/https://patchobserver.com/news/vulnerabilities/crass-ruby-gem-vulnerable-to-cpu-exhaustion-via/Tue, 20 Oct 2026 15:01:38 +0000VulnerabilitiesA high-severity flaw in the Crass gem allows attackers to crash applications by exploiting unbounded exponentiation in CSS parsing.https://patchobserver.com/news/vulnerabilities/draytek-vigor2960-critical-remote-code-execution/https://patchobserver.com/news/vulnerabilities/draytek-vigor2960-critical-remote-code-execution/Tue, 20 Oct 2026 14:06:25 +0000VulnerabilitiesA critical command injection flaw in end-of-life DrayTek Vigor2960 routers allows remote exploitation, with no active patching support confirmed for affected versions.https://patchobserver.com/news/vulnerabilities/fortinet-fortisiem-faces-critical-unauthenticated/https://patchobserver.com/news/vulnerabilities/fortinet-fortisiem-faces-critical-unauthenticated/Tue, 20 Oct 2026 13:42:26 +0000VulnerabilitiesA new vulnerability allows remote attackers to execute code on FortiSIEM systems without credentials, exploiting a path traversal issue in an exposed service.https://patchobserver.com/news/vulnerabilities/on-prem-and-cloud-unblu-spark-users-face-config/https://patchobserver.com/news/vulnerabilities/on-prem-and-cloud-unblu-spark-users-face-config/Tue, 20 Oct 2026 11:33:04 +0000VulnerabilitiesA critical flaw in Unblu Spark allows authenticated attackers to read and modify configuration data for other users and accounts across on-premises and cloud deployments.https://patchobserver.com/news/vulnerabilities/organisations-boost-security-coverage-with/https://patchobserver.com/news/vulnerabilities/organisations-boost-security-coverage-with/Tue, 20 Oct 2026 06:54:32 +0000VulnerabilitiesThe new SaaS service combines four distinct AI agents to run parallel security assessments, aiming to improve vulnerability coverage and reduce false positives for authorized targets.https://patchobserver.com/news/vulnerabilities/organizations-in-israel-uk-and-us-hire-senior/https://patchobserver.com/news/vulnerabilities/organizations-in-israel-uk-and-us-hire-senior/Tue, 20 Oct 2026 04:39:14 +0000VulnerabilitiesThree organizations open senior security positions in Israel, the UK, and the US, signaling ongoing demand for specialized expertise.https://patchobserver.com/news/vulnerabilities/organisations-urged-to-patch-pillow-13-0-0-to/https://patchobserver.com/news/vulnerabilities/organisations-urged-to-patch-pillow-13-0-0-to/Tue, 20 Oct 2026 02:31:44 +0000VulnerabilitiesA critical flaw in Pillow versions before 13.0.0 allows arbitrary code execution via crafted files, requiring immediate updates for exposed systems.https://patchobserver.com/news/vulnerabilities/coze-studio-users-face-high-risk-command/https://patchobserver.com/news/vulnerabilities/coze-studio-users-face-high-risk-command/Tue, 20 Oct 2026 01:31:42 +0000VulnerabilitiesAn insecure default in Coze Studio allows registered users to run unsandboxed code, risking API key theft and database access until version 0.5.0 is deployed.https://patchobserver.com/news/vulnerabilities/db-gpt-0-8-2-vulnerability-grants-unauthenticated/https://patchobserver.com/news/vulnerabilities/db-gpt-0-8-2-vulnerability-grants-unauthenticated/Tue, 20 Oct 2026 01:31:37 +0000VulnerabilitiesA critical flaw in DB-GPT versions up to 0.8.2 allows attackers to execute arbitrary code as root without credentials, posing an immediate risk to exposed instances.https://patchobserver.com/news/vulnerabilities/qilin-inc-ransomware-bypasses-mfa-on-pan-os/https://patchobserver.com/news/vulnerabilities/qilin-inc-ransomware-bypasses-mfa-on-pan-os/Tue, 20 Oct 2026 01:15:54 +0000VulnerabilitiesThreat actors use CVE-2026-0257 to bypass MFA on PAN-OS gateways, enabling VPN access and subsequent ransomware deployment in targeted networks.https://patchobserver.com/news/vulnerabilities/aiohttp-users-must-patch-keepalive-flaw-before/https://patchobserver.com/news/vulnerabilities/aiohttp-users-must-patch-keepalive-flaw-before/Tue, 20 Oct 2026 01:15:54 +0000VulnerabilitiesA high-severity flaw in aiohttp versions below 3.14.4 allows attackers to hold connections open indefinitely, exhausting server capacity until the fix is applied.https://patchobserver.com/news/vulnerabilities/archibus-critical-flaw-allows-unauthenticated/https://patchobserver.com/news/vulnerabilities/archibus-critical-flaw-allows-unauthenticated/Tue, 20 Oct 2026 01:15:54 +0000VulnerabilitiesA severe vulnerability in Eptura Archibus permits attackers to upload executable files and run commands on servers without logging in.https://patchobserver.com/news/vulnerabilities/h3c-magic-nx15-remote-code-injection-flaw-exposes/https://patchobserver.com/news/vulnerabilities/h3c-magic-nx15-remote-code-injection-flaw-exposes/Tue, 20 Oct 2026 00:03:43 +0000VulnerabilitiesA critical remote code injection vulnerability in H3C Magic NX15 firmware allows arbitrary code execution. The exploit code is publicly available and may be utilized by attackers.https://patchobserver.com/news/vulnerabilities/organisations-urged-to-patch-plex-as-attackers/https://patchobserver.com/news/vulnerabilities/organisations-urged-to-patch-plex-as-attackers/Mon, 19 Oct 2026 23:39:38 +0000VulnerabilitiesAttackers are chaining four vulnerabilities in Plex Media Server to execute remote code and deploy malware on unpatched systems.https://patchobserver.com/news/vulnerabilities/orgs-urged-to-patch-mercury-3-2-4-to-stop/https://patchobserver.com/news/vulnerabilities/orgs-urged-to-patch-mercury-3-2-4-to-stop/Mon, 19 Oct 2026 22:30:58 +0000VulnerabilitiesA missing comma in Mercury versions 3.0.0 through 3.2.3 allows attackers to access terminal shells. Version 3.2.4 resolves the critical vulnerability.https://patchobserver.com/news/vulnerabilities/pillow-python-library-patch-fixes-high-severity/https://patchobserver.com/news/vulnerabilities/pillow-python-library-patch-fixes-high-severity/Mon, 19 Oct 2026 21:54:39 +0000VulnerabilitiesA zero-width image processing error in Pillow versions before 13.0.0 allows attackers to crash applications. The vendor has released a fix for this high-severity vulnerability.https://patchobserver.com/news/vulnerabilities/ibm-mq-remote-code-execution-flaw-affects-wide/https://patchobserver.com/news/vulnerabilities/ibm-mq-remote-code-execution-flaw-affects-wide/Mon, 19 Oct 2026 17:56:25 +0000VulnerabilitiesA high-severity stack buffer overflow in IBM MQ allows remote attackers to execute code when processing malformed TLS certificates during channel setup.https://patchobserver.com/news/vulnerabilities/aiohttp-memory-exhaustion-flaw-forces-urgent/https://patchobserver.com/news/vulnerabilities/aiohttp-memory-exhaustion-flaw-forces-urgent/Mon, 19 Oct 2026 17:29:22 +0000VulnerabilitiesA high-severity flaw in aiohttp allows attackers to exhaust server resources via crafted requests, requiring immediate upgrades to version 3.14.4 for all exposed clients.https://patchobserver.com/news/vulnerabilities/drupal-users-urged-to-patch-critical-rce-flaws/https://patchobserver.com/news/vulnerabilities/drupal-users-urged-to-patch-critical-rce-flaws/Mon, 19 Oct 2026 16:04:00 +0000VulnerabilitiesSecurity updates address five vulnerabilities in Drupal core and modules, including two critical remote code execution bugs with known exploit paths.https://patchobserver.com/news/vulnerabilities/jq-lite-flaw-allows-perl-code-execution-in/https://patchobserver.com/news/vulnerabilities/jq-lite-flaw-allows-perl-code-execution-in/Mon, 19 Oct 2026 15:08:24 +0000VulnerabilitiesA vulnerability in the JQ::Lite Perl module allows remote code execution via regular expressions, affecting versions prior to 2.51.https://patchobserver.com/news/vulnerabilities/orgs-face-full-flycms-takeover-patch-hardcoded/https://patchobserver.com/news/vulnerabilities/orgs-face-full-flycms-takeover-patch-hardcoded/Mon, 19 Oct 2026 15:00:32 +0000VulnerabilitiesUnauthenticated attackers can seize full control of FlyCms instances using hardcoded default credentials, requiring immediate credential rotation and access restriction.https://patchobserver.com/news/tech/telegram-link-and-domain-outages-understanding/https://patchobserver.com/news/tech/telegram-link-and-domain-outages-understanding/Mon, 19 Oct 2026 09:11:41 +0000Tech NewsTelegram link and domain outages occur when infrastructure paths fail, cutting off access even while core messaging servers remain online.https://patchobserver.com/news/vulnerabilities/mobaxterm-26-4-ga-patch-urgent-for-local-code/https://patchobserver.com/news/vulnerabilities/mobaxterm-26-4-ga-patch-urgent-for-local-code/Mon, 19 Oct 2026 09:01:55 +0000VulnerabilitiesA high-severity flaw in the latest MobaXterm version allows local attackers to execute arbitrary code via tampered plugin libraries.https://patchobserver.com/news/tech/getting-a-reddit-api-key-account-types-and-rate/https://patchobserver.com/news/tech/getting-a-reddit-api-key-account-types-and-rate/Mon, 19 Oct 2026 08:57:24 +0000Tech NewsObtaining API access requires navigating account types, strict rate limits, and distinct security scopes without triggering automated blocks.https://patchobserver.com/news/tech/macos-security-features-explained-and-how-they/https://patchobserver.com/news/tech/macos-security-features-explained-and-how-they/Mon, 19 Oct 2026 08:39:57 +0000Tech NewsApple operating system controls rely heavily on hardware-level enforcement that blocks unauthorized software before it ever reaches the main processor.https://patchobserver.com/news/tech/why-is-saml-more-secure-than-traditional-password/https://patchobserver.com/news/tech/why-is-saml-more-secure-than-traditional-password/Mon, 19 Oct 2026 07:40:02 +0000Tech NewsCentralizing authentication through a federation standard removes local credentials entirely, preventing credential reuse across independent cloud applications.https://patchobserver.com/news/tech/dnssec-vs-dns-over-tls-protect-integrity-and/https://patchobserver.com/news/tech/dnssec-vs-dns-over-tls-protect-integrity-and/Mon, 19 Oct 2026 07:26:42 +0000Tech NewsDNSSEC proves DNS records are authentic without hiding them, while DNS over TLS encrypts the query path without validating the origin data.https://patchobserver.com/news/tech/smart-home-security-system-project-planning-for/https://patchobserver.com/news/tech/smart-home-security-system-project-planning-for/Mon, 19 Oct 2026 07:11:12 +0000Tech NewsBuilding a smart home security system project exposes internal networks to external control points that bypass traditional perimeter defenses.https://patchobserver.com/news/tech/difference-between-network-management-and-network/https://patchobserver.com/news/tech/difference-between-network-management-and-network/Mon, 19 Oct 2026 06:50:27 +0000Tech NewsNetwork monitoring only watches traffic flow and device health, whereas management actively alters configurations and enforces policies.https://patchobserver.com/news/tech/dual-booting-android-and-windows-how-to-share-one/https://patchobserver.com/news/tech/dual-booting-android-and-windows-how-to-share-one/Mon, 19 Oct 2026 06:31:19 +0000Tech NewsRunning two different operating systems on a single computer requires careful partition management and specific firmware settings.https://patchobserver.com/news/tech/why-is-wpa3-not-widely-implemented-and-how-to/https://patchobserver.com/news/tech/why-is-wpa3-not-widely-implemented-and-how-to/Mon, 19 Oct 2026 06:10:16 +0000Tech NewsLegacy hardware incompatibility and silent fallback mechanisms keep modern wireless security standards from dominating enterprise networks.