The fontcase package on PyPI versions 0.1.0, 0.1.1, and 0.1.2 contains malicious code that downloads and executes an infostealer during import. This malicious behavior includes exfiltration of browser data and credentials, and uses a Telegram bot for communication. There is no information about an available patch or fix.
Microsoft released patches addressing 1,417 vulnerabilities on October 13, 2026, including 76 critical issues. Among these, seven critical vulnerabilities require no customer action. One vulnerability was publicly disclosed before the patch release, and one is already exploited in the wild. Notable vulnerabilities include a Windows Shell security feature bypass (CVE-2026-96951) that allows bypassing the "Mark of the Web" feature, facilitating code execution if a user opens a malicious file, and a .NET Framework security feature bypass (CVE-2026-108398) that could bypass application control. Additionally, Windows DHCP Server and Microsoft Exchange Server have multiple critical remote code execution vulnerabilities. The update also addresses numerous Office vulnerabilities. Microsoft has released patches for these issues, and customers should apply updates promptly.
Versions 2.2.0 and earlier of the Komodo Periphery agent contain an OS command injection vulnerability due to improper validation of Docker container names. This flaw affects container destruction and container log search operations, allowing an authenticated non-admin user with specific permissions to execute arbitrary commands as root on the host system. The vulnerability enables privilege escalation and full compromise of the managed infrastructure. A patch fixing this issue is available in Komodo Periphery version 2.3.0 and later. Users are strongly advised to update immediately.
Vitess contains a reflected cross-site scripting (XSS) vulnerability in the twopczHandler of the vttablet component. The vulnerability arises because the Action and dtid form values are reflected into the HTML response without proper HTML escaping. This flaw allows an attacker to craft URLs that execute JavaScript in the operator's browser with same-origin access to sensitive debug endpoints. The issue affects all released versions up to the current latest releases and was fixed only on the main development branch as of June 2026. No official CVE or advisory existed at the time of reporting.
Lowcoder version 2.4.10 contains an authorization bypass vulnerability in its Query Library API that allows authenticated users with admin or dev roles to access and execute query data belonging to other organizations in a multi-tenant environment. The API lacks organization-level scope checks on metadata retrieval and query execution endpoints, enabling cross-tenant data exposure and potential misuse. No official patch or vendor statement is available. Administrators are advised to restrict access to the affected API endpoints and consider tenant isolation until a fix is released.
VNote versions prior to 4.3.0 contain an OS command injection vulnerability due to improper neutralization of special elements in note filenames. Specifically, attacker-controlled double quotes in POSIX note filenames can break out of quoted paths and inject arguments into external program commands. This can lead to arbitrary command execution if the external program supports command execution via arguments. The issue is fixed in version 4.3.0.
VNote versions prior to 4.3.0 have a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization when inserting YAML frontmatter metadata into a pre element. This flaw allows attacker-supplied JavaScript to execute in the local file viewer context, potentially reading local note files and sending their contents to remote servers. The vulnerability is fixed in version 4.3.0.
MultiTail versions 7.1.5 and earlier contain an OS command injection vulnerability in the execute-on-match feature (-ex and -eX options). This flaw allows an attacker who can influence monitored input to execute arbitrary commands with the privileges of the MultiTail user due to improper escaping of shell metacharacters. No fix is currently available.
Finsys Dockhand versions before 1.0.19 contain an LDAP injection vulnerability in the tryLdapAuth function. This flaw allows unauthenticated attackers to submit crafted wildcard patterns in login requests to enumerate valid LDAP usernames by measuring response timing. The vulnerability arises because the login username is inserted into the LDAP search filter without properly escaping wildcard characters.
CVE-2026-110255 is a server-side request forgery (SSRF) vulnerability in Finsys Dockhand versions before 1.0.43. Authenticated users can exploit this flaw by supplying repository URL and stackfile values that cause the server to fetch arbitrary URLs. This can lead to exposure of sensitive internal service data or cloud metadata endpoints, including credentials and tokens, via the compose response field.
CVE-2026-110254 is a server-side request forgery (SSRF) vulnerability in Finsys Dockhand versions before 1.0.45. The flaw exists in the ipCategory() function, which does not properly validate certain IPv6 transition ranges such as NAT64, 6to4, and Teredo. Authenticated attackers can exploit this by embedding loopback, cloud metadata, or private IPv4 addresses within IPv6 literals in various URL parameters, potentially allowing internal service access.
Dockhand versions before 1.0.45 have an authentication bypass vulnerability where requests to paths ending with static-asset extensions like .js bypass global authentication checks. This flaw allows unauthenticated remote attackers to send specially crafted PUT requests to endpoints such as /api/users/<id>.js to reset passwords of any user, including administrators, enabling account takeover.
Dockhand versions before 1.0.50 have a critical privilege escalation vulnerability due to improper validation of OIDC claims (iss, aud, nonce, exp). This flaw allows users from other tenants in a shared identity provider environment to gain admin access by recreating the mapped admin group and logging in as administrators.
CVE-2026-110111 is a high-severity vulnerability in Xen Orchestra before version 6.9.0. It involves improper access control that allows any authenticated user to escalate privileges to global administrator by exploiting unprotected methods related to ESXi VM imports. The attack leverages prototype pollution via a crafted .vmx file served by a malicious ESXi host, enabling permission-less accounts to inherit admin rights and potentially execute remote code.
A vulnerability in Engine.IO versions 6.6.0 through 6.6.9 allows a malicious client to send a crafted transport upgrade request that triggers an uncaught exception, causing the Node.js process to terminate. This occurs due to improper handling of the Engine.IO protocol revision during transport upgrades. The issue is fixed in version 6.6.10.
Microsoft has announced that Windows 11 version 24H2 Home and Pro editions have reached end of support as of October 13, 2026. These editions will no longer receive monthly security or non-security updates, including protections against the latest security threats. Users are advised to upgrade to Windows 11 version 26H2, which is currently rolling out and will be supported until October 2029. Enterprise and Education editions of Windows 11 24H2 remain supported until October 12, 2027. The end of support means devices running these Home and Pro editions will not receive further security patches, potentially increasing exposure to vulnerabilities if not upgraded.
The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using `git checkout` without verifying that the resulting HEAD matched the pinned SHA. An attacker controlling a plugin's upstream repository could create a branch named identically to the pinned 40-character SHA, causing the checkout to silently resolve to the attacker's branch tip instead of the reviewed commit, resulting in attacker-controlled code being installed bypassing the pinned hash. Exploitation required a user to install a malicious plugin, pin to a safe hash, and for the plugin source to be hosted on a git host that permitted SHA-shaped branch names.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.
Thank you to Or Nevo Michrowski of Air Security for reporting this issue.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.