This report summarizes multiple cyber threats and incidents observed in late October 2026, including large-scale breaches, supply-chain attacks, AI-enabled cybercrime tools, and critical software vulnerabilities. Notable incidents include a cyberattack on Japanese cloud provider Onamae Desktop Cloud affecting over 26,000 servers, a data breach at India's State Bank of India exposing nearly 3,900 customer records, and a supply-chain compromise of the LiteLLM AI gateway. AI-enabled tools are facilitating large-scale fraud and ransomware attacks targeting critical sectors in the United States. Critical PHP vulnerabilities enabling remote code execution are being widely exploited, with most instances unpatched. Oracle and GitLab have released patches for numerous critical vulnerabilities, including a critical remote code execution flaw in GitLab and a privilege escalation vulnerability in Arista VeloCloud Orchestrator that has been exploited in the wild.
High8.1EPSS 0.8%Zero Day InitiativeCVE-2026-114550
A remote code execution vulnerability exists in libwebsockets due to improper handling of MQTT PUBACK packets, allowing unauthenticated attackers to execute arbitrary code on affected systems. The vulnerability has been assigned CVE-2026-114550 and a high severity rating by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem's load_and_preprocess_data function due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A remote code execution vulnerability exists in Meta FAIRChem due to deserialization of untrusted data in the ion_db_path component. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating assigned by ZDI.
Meta FAIRChem contains a deserialization vulnerability in the reaction_db_path component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating of 7.8 by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem related to deserialization of untrusted data in the adsorbate_db_path component. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem's dense_eval dft-compute component due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating with a CVSS score assigned by ZDI of 7.8.
A remote code execution vulnerability exists in Meta FAIRChem's dense_eval results-file deserialization process. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability that allows remote attackers to execute arbitrary code if a user interacts with malicious content such as a crafted webpage or file. This vulnerability requires user interaction for exploitation and has been assigned a high severity rating by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem OMolRunner due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating with a CVSS score of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A remote code execution vulnerability exists in Meta FAIRChem's process_mlrs component due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating assigned by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability in the AdsorbMLRunner component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative with a CVSS score of 7.8.
A remote code execution vulnerability exists in Meta FAIRChem's write_top_k_vasp component. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
Meta FAIRChem contains a vulnerability in the get_computational_df_to_predict function that allows remote attackers to execute arbitrary code via deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating of 7.8 by the Zero Day Initiative.
A remote code execution vulnerability exists in the run_validation component of Meta FAIRChem. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating by the Zero Day Initiative.
Meta FAIRChem contains a deserialization vulnerability in the dense_eval dft-targets component that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
A double free vulnerability in Pixar Animation Studio OpenUSD crate file parsing allows remote attackers to execute arbitrary code. Exploitation requires interaction with the OpenUSD library, with attack vectors varying by implementation. The vulnerability has a high severity rating of 7.8 assigned by ZDI.