VulnHub

In October 2026, Android released updates that patched 25 vulnerabilities, including a significant flaw in the System component that could allow attackers to escalate their privileges. This particular vulnerability is critical, meaning it poses a serious risk to device security. Users of Android devices should install the latest updates as soon as possible to protect their systems from potential exploitation. The updates address weaknesses across various Android versions, ensuring that devices remain secure against these threats. Keeping software up to date is essential for maintaining security and preventing unauthorized access.

Monta's charging station management app, monta.app, has several critical vulnerabilities that could allow attackers to gain unauthorized control over charging stations or disrupt services. All versions of the app are affected by these issues, which include missing authentication for critical functions and insufficient session management. Specifically, attackers could exploit weaknesses in the WebSocket API to impersonate charging stations or launch denial-of-service attacks. Monta is actively working to enhance security by promoting authenticated connections and has implemented measures like rate limiting and connection throttling to mitigate these risks. This situation poses significant concerns for users in the energy and transportation sectors, as it could jeopardize the security of charging infrastructure worldwide.

ABB Protection and Control IED Manager PCM600 has been found to contain two vulnerabilities that could allow attackers to escalate privileges or overwrite files. Specifically, versions of PCM600 up to and including 2.14 are affected by CVE-2026-15952 and CVE-2026-15953. The first vulnerability allows local users with valid credentials to gain elevated privileges due to improper permission settings in the Scheduler Service. The second vulnerability concerns insufficient validation during the extraction of project archive files, enabling potential path traversal attacks. These vulnerabilities pose significant risks, particularly in critical infrastructure sectors like energy, where ABB's systems are widely deployed. Users are advised to take immediate action to mitigate these risks.

Adobe has addressed nine critical security flaws found in its Connect and AEM Forms products. These vulnerabilities could allow attackers to execute arbitrary code and escalate their privileges within affected systems. Users of these products are urged to apply the patches released by Adobe to protect against potential exploitation. The flaws present a significant risk, especially for organizations that rely on these tools for their operations. Keeping software up to date is essential to mitigate these risks and safeguard sensitive information.

Microsoft has addressed a serious security flaw in Azure AI Foundry, identified as CVE-2026-85889, which has been assigned a maximum severity score of 10.0. The vulnerability stems from a lack of authentication for critical functions, allowing unauthorized users to escalate their privileges over a network. This flaw could potentially let attackers gain higher-level access than intended, posing significant risks for organizations using the platform. Fortunately, Microsoft has implemented fixes, and users do not need to take any additional action to secure their systems. However, the incident emphasizes the importance of vigilance in cloud security practices.

Google has acknowledged a serious vulnerability in the Pixel Cellular Modem, identified as CVE-2026-58704, which has a CVSS score of 8.0. This flaw allows for privilege escalation due to a logic error, potentially enabling unauthorized access or control over affected devices. Although the company has indicated that there are signs of limited targeted exploitation, it is crucial for users of Pixel devices to be aware of the risks. The flaw could affect various models in the Pixel lineup, impacting their cellular modem functionality. Google has released patches to address this vulnerability, and users are encouraged to update their devices promptly to mitigate any potential threats.

Acronis has reported a serious security vulnerability in its Backup plugin for cPanel and Web Host Manager (WHM), which is currently being exploited in targeted attacks. The flaw, known as CVE-2026-87886, has a CVSS score of 7.8 and allows local privilege escalation due to improper file permissions. This issue affects the Acronis Backup plugin for cPanel and WHM on Linux systems. Users of these services should take immediate action, as the vulnerability poses a significant risk to their systems. Promptly addressing this flaw is crucial to prevent unauthorized access and potential data breaches.

A Thai broadband provider has fallen victim to a cyber attack that exploited a vulnerability in Fortinet's security products. The attackers used various scripts for reconnaissance and probing, along with brute-force tools and methods to escalate privileges within the network. This breach raises concerns about the security of internet service providers and their ability to protect customer data. As the incident unfolds, it serves as a reminder for organizations to patch known vulnerabilities promptly and strengthen their defenses against such tactics. Users of the affected service may need to monitor their accounts for any unusual activity as a precaution.

Researchers have identified three vulnerabilities in JFrog Artifactory that can be exploited by attackers to bypass authentication and gain elevated privileges, potentially allowing them to deploy backdoors. These flaws affect users of JFrog Artifactory, which is commonly used for managing software packages across development environments. The ability to gain administrator-level access poses significant risks, as it could lead to unauthorized access to sensitive data and systems. Companies using this software should take immediate action to secure their installations to prevent exploitation. The vulnerabilities emphasize the need for regular security assessments and timely updates to protect against malicious actors.

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating they are being actively exploited. The vulnerabilities include CVE-2026-42016 and CVE-2026-42018, both affecting JFrog Artifactory, and CVE-2026-84869, which impacts ConnectWise ScreenConnect. These vulnerabilities can lead to unauthorized access and privilege escalation, posing significant risks to federal agencies and other organizations that use these products. CISA urges federal agencies to prioritize addressing these vulnerabilities rapidly as part of their security update strategies, while also encouraging all organizations to adopt similar practices to manage their exposure to cyber threats effectively.

ST Engineering iDirect has reported multiple vulnerabilities affecting its iQ-Series terminals, specifically the Evolution, 3315, and 9-Series models running versions 4.5.2.1 or earlier. These weaknesses could allow unauthorized access to sensitive device information and lead to denial-of-service conditions. Attackers could exploit these flaws to impersonate terminals on satellite networks, launch cross-site request forgery attacks, or escalate privileges due to inadequate authentication measures. Users are strongly advised to update their systems to version 4.5.3.0 or newer to mitigate these risks, while also implementing security best practices such as restricting access to management interfaces and monitoring for unusual activity.