NEW C3
20 Vulnerabilities in Fortinet products and BeyondTrust are being attacked
CISA confirms active exploitation of both vulnerabilities and adds them to the KEV catalog , patching is therefore not preventive but acutely urgent.
High
What has changed?
Comparing 19 October 2026 with the previous day 18 October 2026.
Newly added
8 A3
20 [UPDATE] Siemens SIMATIC S7: Multiple Vulnerabilities
The advisory bundles multiple vulnerabilities across several SIMATIC S7 product lines, pointing to a broad patching window in OT environments where updates can only be applied during maintenance windows.
High
NEW C3
20 Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
The report shows that a legitimate signed Siemens application is being abused as a DLL sideloading host for an active ClickFix malware campaign, a risk that goes beyond classic patch information.
High
NEW C3
17 Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
The report shows that state-sponsored actors use Fortinet edge devices not only for initial access but to establish a persistent, hard-to-detect implant platform inside the target network.
High
NEW A3
0 [UPDATE] Fortinet FortiOS, FortiProxy and FortiSwitch: Vulnerability allows file manipulation
The attack requires local access, so the risk is mainly relevant for already compromised or multi-stage attacked environments with FortiGate and FortiProxy appliances.
Medium
NEW A3
0 [UPDATE] Google Chrome / Microsoft Edge: Multiple vulnerabilities enable unspecified attacks
The advisory summarizes multiple browser vulnerabilities without CVE IDs, severity ratings or exploitation evidence, thus offering little concrete prioritization guidance.
Medium
A3
0 Linux Kernel: Multiple Vulnerabilities
Medium
A3
0 [UPDATE] Linux Kernel: Vulnerability Allows Gaining Administrator Rights
The BSI update confirms the ongoing relevance of local privilege escalation in the Linux kernel without providing new details on exploitation.
Medium
Newly KEV-listed
0No changes in this category.
Score moved
0No changes in this category.
No longer in report
7 B2
100 ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
The flaw sits in the AdobePDFL PDF/JPEG parsing component and requires user interaction, making email attachments and web downloads the primary attack vector.
Critical
CVSS
7.8
EPSS
0%
B2
100 ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
The ZDI advisory details CVE-2026-95636, an RCE flaw in Photoshop's DCM pixel processing that can be exploited via crafted image files requiring user interaction.
Critical
CVSS
7.8
EPSS
0%
FAMOUS CHOLLIMA B3
90 U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
The disruption of a DPRK IT-worker operation highlights the risk of North Korean sham employment in Western supply chains, even without classic malware.
Critical
NEW A2
47 CVE-2026-110927
The report names no active exploitation, attacker, or affected sectors; it describes only a technical memory-exhaustion DoS flaw in OpenSSH compression handling.
Medium
CVSS
4.3
EPSS
0%
B3
17 October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Besides the already actively exploited Mark-of-the-Web bypass in Windows Shell, the Exchange and DHCP remote code execution flaws and the high number of Office vulnerabilities are the most practically relevant points of this Patch Tuesday.
High
C3
0 Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
The campaign shows that monetized bandwidth theft via compromised network devices, not just classic malware, is an active risk.
Medium
NEW A3
0 [UPDATE] Linux Kernel: Multiple vulnerabilities allow unspecified attack
Medium