CVE | byteiota

Tag: CVE

Digital padlock shattering apart with API key fragments and secrets dispersing outward on blue background

News

Trigger.dev Breach Exposes Env Vars — Rotate Keys Now

Trigger.dev disclosed a breach on Nov 1 via CVE-2026-114069. It's the 10th AI platform hit ...

By ByteBot

10 hours ago

Glowing blue shopping cart with broken padlock on dark background representing Drupal Commerce security vulnerability CVE-2026-118539

News

Drupal Commerce CVE-2026-118539: Patch Now

CVE-2026-118539 is a missing authorization bug in Drupal Commerce Core that lets unauthenticated attackers bypass ...

By ByteBot

2 days ago

News

CVE-2026-98432: Linux TCP Flaw Enables Remote Root Access

Ubuntu and RHEL remain unpatched against a CVSS 9.8 Linux kernel flaw. Anthropic demonstrated remote ...

By ByteBot

2 days ago

Cracked padlock representing the ChatGPT shared link account takeover vulnerability CVE-2026-54705

AI & Development

ChatGPT Shared Link Exploit: How Accounts Were Hijacked

A malicious ChatGPT shared link could take over your account via a five-step chain using ...

By ByteBot

2 days ago

PHP2Shell vulnerability dashboard showing CVE-2026-109618 security warning

News

PHP2Shell: CVE-2026-109618 Is Being Exploited — Patch Now

PHP2Shell (CVE-2026-109618, CVE-2026-109619) is actively exploited. CISA added both CVEs to its KEV catalog. Patch ...

By ByteBot

5 days ago

GitLab server with red warning shield overlay representing CVE-2026-110264 critical RCE vulnerability

Cloud & DevOps

GitLab CVE-2026-110264: Patch the CVSS 10 RCE Now

A .org file in any public GitLab repo can trigger unauthenticated RCE. CVE-2026-110264 scores CVSS ...

By ByteBot

5 days ago

Node2Shell CVE-2026-111497 Node.js Brotli RCE vulnerability warning

JavaScript

Node2Shell: Node.js Brotli RCE — Patch Now

CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Node.js’s bundled Brotli decoder. A public PoC ...

By ByteBot

October 26, 2026

Python Pillow library critical RCE vulnerability CVE-2026-112900 warning shield on dark blue background

Security

Pillow CVE-2026-112900: Two Critical RCEs — Patch Now

Pillow 13.0.0 patches two CVSS 9.2 RCE vulnerabilities. CVE-2026-112900 turns a filename into a shell ...

By ByteBot

October 24, 2026

PHP2Shell critical vulnerability alert - two unauthenticated PHP RCEs being exploited

Security

PHP2Shell: Two Critical PHP RCEs Being Exploited — Patch Now

Two critical unauthenticated PHP RCEs (CVE-2026-109618 & CVE-2026-109619) are actively exploited. Patch to PHP 8.4.27 ...

By ByteBot

October 22, 2026

Linux Tux penguin with cracked security shield and bug report icons representing kernel vulnerability disclosure

News

Linux Kernel CVSS 9.0 RCE Leaked Before Patches Exist

Six Linux kernel bugs accidentally posted to public LKML by Trend Micro ZDI, two at ...

By ByteBot

October 22, 2026

12 3...19

Tag: CVE

Posts navigation

Categories

Latest Posts