https://redteamtribune.com/topic/vulnerabilities/hpe-products-hit-by-critical-9-8-cve-2026-79860/RedTeam Tribuneen2026-10-22T21:26:00ZHPE Products Hit by Critical 9.8 CVE-2026-79860 Flaw in Versions Up to 8.13.3.0 and 8.10.0.23https://redteamtribune.com/topic/vulnerabilities/litellm-proxy-cryptographic-reuse-enables-admin/RedTeam Tribuneen2026-10-22T19:07:00ZLiteLLM Proxy Cryptographic Reuse Enables Admin Takeover via Forged Tokenshttps://redteamtribune.com/topic/cyber-attacks/connectwise-supply-chain-breach-storm-0940-uses/RedTeam Tribuneen2026-10-22T19:07:00ZConnectWise Supply Chain Breach: Storm-0940 Uses ARTEX AI Agents for Rapid Credential Abusehttps://redteamtribune.com/topic/cyber-attacks/github-enterprise-server-researcher-r31n-exploits/RedTeam Tribuneen2026-10-22T17:59:09ZGitHub Enterprise Server Researcher @r31n Exploits Chain Flaws in Bug Bounty Programhttps://redteamtribune.com/topic/vulnerabilities/php-rce-vulnerabilities-tested-days-before-patch/RedTeam Tribuneen2026-10-22T15:07:00ZPHP RCE Vulnerabilities Tested Days Before Patch, Mass Exploitation Follows Updatehttps://redteamtribune.com/topic/cyber-attacks/chrome-enhanced-protection-adds-clickfix-command/RedTeam Tribuneen2026-10-22T12:08:02ZChrome Enhanced Protection Adds ClickFix Command Detection and Gemini Scam Warningshttps://redteamtribune.com/topic/cyber-attacks/tor-exit-relays-misconfigured-to-intercept-ssh/RedTeam Tribuneen2026-10-22T11:52:05ZTor Exit Relays Misconfigured to Intercept SSH Credentials and Emailhttps://redteamtribune.com/topic/vulnerabilities/opencode-code-execution-flaw-in-mcp-server-sign/RedTeam Tribuneen2026-10-22T11:24:21ZOpenCode Code Execution Flaw in MCP Server Sign-In on Windowshttps://redteamtribune.com/topic/vulnerabilities/meta-muse-ai-link-exposure-flaw-leaks-business/RedTeam Tribuneen2026-10-22T10:41:55ZMeta Muse AI Link Exposure Flaw Leaks Business Data via Passive DNShttps://redteamtribune.com/topic/vulnerabilities/php-remote-code-execution-flaws-leaked-before/RedTeam Tribuneen2026-10-22T09:50:38ZPHP Remote Code Execution Flaws Leaked Before Patch Releasehttps://redteamtribune.com/topic/vulnerabilities/oracle-soa-suite-critical-flaw-in-fabric-layer/RedTeam Tribuneen2026-10-22T04:53:13ZOracle SOA Suite Critical Flaw in Fabric Layer Enables Remote System Takeover via HTTPhttps://redteamtribune.com/topic/vulnerabilities/oracle-bpm-suite-soap-vulnerability-cvss-9-9/RedTeam Tribuneen2026-10-22T04:36:54ZOracle BPM Suite SOAP Vulnerability CVSS 9.9 Enables Remote Takeover in Versions 12.2 and 14.1https://redteamtribune.com/topic/cyber-attacks/attackers-hijack-staples-and-dell-order/RedTeam Tribuneen2026-10-21T11:15:13ZAttackers Hijack Staples and Dell Order Notifications for Voice Phishinghttps://redteamtribune.com/topic/vulnerabilities/aiohttp-multipart-requests-cause-unbounded-file/RedTeam Tribuneen2026-10-21T09:58:30Zaiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3https://redteamtribune.com/topic/vulnerabilities/eclipse-iofog-websocket-authentication-bypass/RedTeam Tribuneen2026-10-21T08:56:43ZEclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versionshttps://redteamtribune.com/topic/vulnerabilities/argo-cd-jsonnet-flaw-risks-server-crash-and-file/RedTeam Tribuneen2026-10-21T08:24:44ZArgo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0https://redteamtribune.com/topic/vulnerabilities/argo-cd-kustomize-injection-bug-lets-read-only/RedTeam Tribuneen2026-10-21T08:08:18ZArgo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servershttps://redteamtribune.com/topic/vulnerabilities/php-remote-code-execution-flaws-rated-9-2-trigger/RedTeam Tribuneen2026-10-21T06:58:19ZPHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Planhttps://redteamtribune.com/topic/vulnerabilities/openstack-manila-authenticated-cross-project/RedTeam Tribuneen2026-10-21T06:26:45ZOpenStack Manila Authenticated Cross-Project Manipulation of Public Shares in CVE-2026-71195https://redteamtribune.com/topic/cyber-attacks/iq-lvbs-claims-rival-comma-ai-ip-targeted/RedTeam Tribuneen2026-10-21T04:40:21ZIQ.Lvbs Claims Rival Comma.ai IP Targeted NovaSpark Modelhttps://redteamtribune.com/topic/vulnerabilities/duplicator-object-injection-cve-2026-82814-allows/RedTeam Tribuneen2026-10-21T04:40:21ZDuplicator Object Injection CVE-2026-82814 Allows Unauthenticated RCE and File Deletionhttps://redteamtribune.com/topic/vulnerabilities/php-cvss-9-2-vulnerabilities-impact-wordpress/RedTeam Tribuneen2026-10-21T04:29:08ZPHP CVSS 9.2 Vulnerabilities Impact WordPress; Critical Patch Arrives October 21https://redteamtribune.com/topic/vulnerabilities/totolink-x2000r-missing-signature-check-in-boa/RedTeam Tribuneen2026-10-21T04:12:39ZTotolink X2000R Missing Signature Check in boa Update Allows Arbitrary Firmware Installationhttps://redteamtribune.com/topic/vulnerabilities/php-rce-flaws-at-9-2-cvss-severity-prompt/RedTeam Tribuneen2026-10-21T03:21:04ZPHP RCE flaws at 9.2 CVSS severity prompt emergency patches for October 21 after WatchTowr confirms leaks