{"date": "2026-10-29", "generated_at": "2026-10-29T03:03:25.608800+00:00", "headline": "vLLM patches land just in time; cloud account hygiene takes the rest of the day", "summary": "Today’s brief is anchored by two high-severity issues in vLLM, both fixed in version 0.32.0, which makes for a straightforward patching task for anyone running multimodal inference. The rest of the list is a steady stream of cloud account and AI infrastructure advisories from AWS, Azure, and Google, none of which show signs of active exploitation yet. While the EPSS scores are low, the sheer volume of SSRF and deserialization flaws in agent frameworks and SDKs suggests we should tighten our monitoring. There is no rush to drop everything, but the vLLM update is the clear priority for this week. Keep an eye on the AWS MCP Server and Strands Agents SDK, as these are newer attack surfaces for AI workloads.", "brief": {"headline": "vLLM patches land just in time; cloud account hygiene takes the rest of the day", "summary": "Today’s brief is anchored by two high-severity issues in vLLM, both fixed in version 0.32.0, which makes for a straightforward patching task for anyone running multimodal inference. The rest of the list is a steady stream of cloud account and AI infrastructure advisories from AWS, Azure, and Google, none of which show signs of active exploitation yet. While the EPSS scores are low, the sheer volume of SSRF and deserialization flaws in agent frameworks and SDKs suggests we should tighten our monitoring. There is no rush to drop everything, but the vLLM update is the clear priority for this week. Keep an eye on the AWS MCP Server and Strands Agents SDK, as these are newer attack surfaces for AI workloads.", "items": [{"cve_id": "CVE-2026-115915", "narrative": "This issue in vLLM 0.30.0 allows untrusted EPS image inputs to trigger a denial of service or remote code execution via Ghostscript. The vulnerability stems from `ImageMediaIO` passing attacker-controlled bytes to Pillow without restricting formats, meaning a malicious EPS labeled as PNG can reach the host’s Ghostscript executable. It ranks high because it touches the AI layer with a blast radius of 3, and while no exploitation is reported yet, the EPSS is 0.00631. In a Kubernetes estate, this affects any pod running vLLM with multimodal support, where an attacker could send a crafted image to a public endpoint. The concrete action is to upgrade to vLLM 0.32.0, which is available now. This is a straightforward patch that removes the risk of sandbox escape via Ghostscript, so it is worth patching this week to keep your inference stack secure.", "source_url": "https://github.com/advisories/GHSA-h3rc-j82p-2c3h", "layer": "ai", "exploited": "unknown"}, {"cve_id": "CVE-2026-115912", "narrative": "vLLM is also affected by a public multimodal shared memory handle forgery that can reach worker-side `pickle.loads()`. This occurs when insecure serialization is disabled, yet the system still processes untrusted data through the shared memory cache. The issue is rated high severity with a blast radius of 3 in the AI layer, and no exploitation has been reported so far. The EPSS is 0.00481, which is low but non-zero, indicating a theoretical risk that could be realized if an attacker can manipulate the shared memory handles. For platform engineers, this means any vLLM deployment handling multimodal data is potentially exposed to code execution via deserialization. The fix is available in version 0.32.0, so you should upgrade alongside the previous vLLM patch. This closes a subtle but dangerous path for attackers to inject malicious objects into your inference workers.", "source_url": "https://github.com/advisories/GHSA-6757-hggm-hp2w", "layer": "ai", "exploited": "unknown"}, {"cve_id": "CVE-2026-93327", "narrative": "Google Cloud has patched a deserialization of untrusted data vulnerability in the SubWorkflow task of Application Integration. This issue allowed an authenticated user to execute arbitrary code by submitting a maliciously crafted serialized object. It sits in the cloud_account layer with a blast radius of 4, which is wider than the AI-specific items but still contained to the service. No exploitation is reported, and the EPSS is 0.0, suggesting a low immediate risk. However, for teams using Application Integration for complex workflows, this is a significant trust boundary. The vulnerability was patched on September 11, 2026, so no customer action is required if you are on the latest version. This is a good reminder to keep your GCP services up to date, as deserialization flaws in cloud-native services can often lead to privilege escalation within the account.", "source_url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-074", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-118029", "narrative": "The AWS SDK for pandas (awswrangler) has an unverified ownership issue in the default Athena query result location. This means that if you are using the library to run queries, the results might be written to a location that another user or process can access. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.0, but the nature of the flaw—improper access control—means it could lead to data leakage in multi-tenant environments. For data engineers using awswrangler in their pipelines, this is a subtle risk that could expose sensitive query results. There is no specific fix version mentioned in the bulletin, so you should check for updates to the library or ensure that your S3 buckets have strict access controls. This is a 'keep an eye on it' item, as it requires careful configuration rather than a simple patch.", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-89049", "narrative": "AWS Systems Manager Agent has a server-side request forgery (SSRF) vulnerability in its Session Manager port forwarding functionality. This allows an attacker to make requests to internal resources that should not be accessible from the agent. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00662, which is slightly higher than some other items, suggesting a moderate risk. For teams using SSM for remote access to EC2 instances, this could be a path to internal network reconnaissance. There is no fix version specified, so you should monitor for updates from AWS. In the meantime, ensure that your SSM endpoints are not exposed to untrusted networks and that you have strict security groups in place. This is a 'worth patching this week' item if you are running SSM agents in sensitive environments.", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-107-aws/", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-89090", "narrative": "The AWS SDK for Go v2 has a denial of service vulnerability in its event stream header decoder. This could allow an attacker to crash the SDK by sending malformed headers, which would disrupt any application relying on it for streaming data. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00305, which is low, but the impact on availability could be significant for critical services. For developers using the Go SDK in their Kubernetes workloads, this is a risk that could lead to pod restarts or service outages. There is no fix version specified, so you should check for updates to the SDK. This is a 'keep an eye on it' item, as it is more of a stability issue than a security breach, but it is still worth addressing to ensure the resilience of your cloud-native applications.", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-110-aws/", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-115419", "narrative": "The Strands Agents SDK A2A Server has an issue where data elements can be disclosed to the wrong session. This means that if multiple agents are interacting with the server, one agent’s data could be leaked to another. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00426, which is low, but the impact on data confidentiality could be high. For teams building multi-agent systems with Strands, this is a risk that could lead to sensitive information being exposed. There is no fix version specified, so you should check for updates to the SDK. This is a 'keep an eye on it' item, as it requires careful session management and isolation to prevent data leakage. Ensure that your agents are running in isolated environments and that you have strict access controls in place.", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-105014", "narrative": "Azure Pipelines has a remote code execution vulnerability due to improper neutralization of special elements in a command. This allows an unauthorized attacker to execute code over a network. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00667, which is moderate, suggesting a realistic risk if the pipeline is exposed to untrusted input. For teams using Azure DevOps for CI/CD, this is a significant risk, as a compromised pipeline could lead to the deployment of malicious code. There is no fix version specified, so you should monitor for updates from Microsoft. In the meantime, ensure that your pipelines are not processing untrusted input without proper sanitization. This is a 'worth patching this week' item if you are using Azure Pipelines in a production environment.", "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014", "layer": "cloud_account", "exploited": "unknown"}, {"cve_id": "CVE-2026-108456", "narrative": "Azure AI Foundry has a server-side request forgery (SSRF) vulnerability that allows an authorized attacker to elevate privileges over a network. This means that if an attacker has access to the AI Foundry service, they could potentially make requests to internal resources that should not be accessible. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00701, which is the highest in this list, suggesting a higher risk. For teams using Azure AI Foundry for model deployment and management, this is a significant risk, as a compromised service could lead to privilege escalation within the Azure account. There is no fix version specified, so you should monitor for updates from Microsoft. This is a 'patch today' item if you are using Azure AI Foundry in a sensitive environment.", "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456", "layer": "cloud_account", "exploited": "unknown"}]}, "editorial": {"headline": "vLLM patches and cloud hygiene: a quiet day with clear priorities", "editorial": "It’s a calm morning on the security desk, but there’s still work to be done. The most pressing items are in your AI stack, specifically vLLM. Two vulnerabilities, CVE-2026-115915 and CVE-2026-115912, allow untrusted inputs to trigger denial of service or reach worker-side deserialization. While no exploitation has been reported yet, the fix is straightforward: upgrade to version 0.32.0. Given that these touch your inference workloads, it’s worth patching this week to keep your AI estate tidy. The underlying weakness classes, CWE-183 and CWE-502, suggest you might want to glance at your runtime detection logs for any unusual deserialization patterns, just to be sure. Moving to the cloud layer, Google Cloud has issued a patch for a deserialization issue in Application Integration (CVE-2026-93327). Since a fix is available, apply it during your next maintenance window. On the AWS side, we have a few items to keep an eye on. CVE-2026-89049 involves server-side request forgery in the Systems Manager Agent. With an EPSS of 0.00662, it’s a low probability, but if you use Session Manager port forwarding, it’s worth a look. Similarly, CVE-2026-118029 concerns unverified ownership of Athena query results in the AWS SDK for pandas. No rush on this one, but it’s good to be aware. Finally, Azure has flagged an RCE in Pipelines (CVE-2026-105014) and an elevation of privilege in AI Foundry (CVE-2026-108456). Both have low EPSS scores, so they can wait for the standard patch cycle. The key takeaway: secure your vLLM instances first, then roll out the cloud patches. No panic needed, just steady hands.", "today": {"act_now": "Upgrade vLLM to version 0.32.0 to address CVE-2026-115915 and CVE-2026-115912. Apply the Google Cloud patch for Application Integration deserialization (CVE-2026-93327).", "watch": "Monitor AWS Systems Manager Agent for SSRF indicators related to CVE-2026-89049. Keep an eye on Azure Pipelines and AI Foundry for patches addressing CVE-2026-105014 and CVE-2026-108456."}}, "top10": [{"cve_id": "CVE-2026-115915", "ghsa_id": "GHSA-h3rc-j82p-2c3h", "name": "vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE", "vendor": "", "product": "vllm", "summary": "### Summary In vLLM 0.30.0, `ImageMediaIO` passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled `image/png` reached the host's Ghostscript executable. On a host with Ghostscript affected by CVE-2024-29510, this exposes the known Ghostscript sandbox", "severity": "high", "published": "2026-10-28", "fix_version": "0.32.0", "source": "GitHub Advisories (pip)", "source_url": "https://github.com/advisories/GHSA-h3rc-j82p-2c3h", "epss": 0.00631, "ecosystem_match": 2, "layer": "ai", "blast_radius": 3, "matched_term": "vllm", "exploited": "unknown", "exploited_source": "", "exploitation": 1, "fix_available": true, "fix_availability": 2, "priority_rank": 1, "priority_reason": "AI blast radius (vllm); no exploitation reported; patch available (0.32.0)", "recently_covered": false, "cwe": ["CWE-183", "CWE-20"], "narrative": "This issue in vLLM 0.30.0 allows untrusted EPS image inputs to trigger a denial of service or remote code execution via Ghostscript. The vulnerability stems from `ImageMediaIO` passing attacker-controlled bytes to Pillow without restricting formats, meaning a malicious EPS labeled as PNG can reach the host’s Ghostscript executable. It ranks high because it touches the AI layer with a blast radius of 3, and while no exploitation is reported yet, the EPSS is 0.00631. In a Kubernetes estate, this affects any pod running vLLM with multimodal support, where an attacker could send a crafted image to a public endpoint. The concrete action is to upgrade to vLLM 0.32.0, which is available now. This is a straightforward patch that removes the risk of sandbox escape via Ghostscript, so it is worth patching this week to keep your inference stack secure.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-115915.mp3"}, {"cve_id": "CVE-2026-115912", "ghsa_id": "GHSA-6757-hggm-hp2w", "name": "vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled", "vendor": "", "product": "vllm", "summary": "## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM MultiModalKwargsItem: assert mm_item is not None, f\"Expected an address item for {mm_hash=}\" if \"address\" in mm_item: address = cast(int, mm_item[\"address\"].data) monotonic_id = cast(int, mm_item[\"monotonic_id\"].data) return self._shm_cache.get(address, monotonic_id) return mm_item ``` The dereference lands in the", "severity": "high", "published": "2026-10-28", "fix_version": "0.32.0", "source": "GitHub Advisories (pip)", "source_url": "https://github.com/advisories/GHSA-6757-hggm-hp2w", "epss": 0.00481, "ecosystem_match": 2, "layer": "ai", "blast_radius": 3, "matched_term": "pickle", "exploited": "unknown", "exploited_source": "", "exploitation": 1, "fix_available": true, "fix_availability": 2, "priority_rank": 2, "priority_reason": "AI blast radius (pickle); no exploitation reported; patch available (0.32.0)", "recently_covered": false, "cwe": ["CWE-502"], "narrative": "vLLM is also affected by a public multimodal shared memory handle forgery that can reach worker-side `pickle.loads()`. This occurs when insecure serialization is disabled, yet the system still processes untrusted data through the shared memory cache. The issue is rated high severity with a blast radius of 3 in the AI layer, and no exploitation has been reported so far. The EPSS is 0.00481, which is low but non-zero, indicating a theoretical risk that could be realized if an attacker can manipulate the shared memory handles. For platform engineers, this means any vLLM deployment handling multimodal data is potentially exposed to code execution via deserialization. The fix is available in version 0.32.0, so you should upgrade alongside the previous vLLM patch. This closes a subtle but dangerous path for attackers to inject malicious objects into your inference workers.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-115912.mp3"}, {"cve_id": "CVE-2026-93327", "name": "GCP-2026-074: A Deserialization of Untrusted Data vulnerability was discovered in the SubWorkflow task in Application Integration versions prior to September 11, 2026.", "vendor": "", "product": "", "summary": "A Deserialization of Untrusted Data vulnerability was discovered in the SubWorkflow task in Application Integration versions prior to September 11, 2026. What should I do? No customer action is required. This vulnerability was patched on September 11, 2026. What vulnerabilities are being addressed? An authenticated user could use a maliciously crafted serialized object to execute arbitrary code.", "published": "2026-10-28", "source": "Google Cloud security bulletins", "source_url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-074", "epss": 0.0, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "gcp", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": true, "fix_version": "", "fix_availability": 2, "priority_rank": 3, "priority_reason": "cloud-account blast radius (gcp); no exploitation reported; patch available", "recently_covered": false, "cwe": [], "narrative": "Google Cloud has patched a deserialization of untrusted data vulnerability in the SubWorkflow task of Application Integration. This issue allowed an authenticated user to execute arbitrary code by submitting a maliciously crafted serialized object. It sits in the cloud_account layer with a blast radius of 4, which is wider than the AI-specific items but still contained to the service. No exploitation is reported, and the EPSS is 0.0, suggesting a low immediate risk. However, for teams using Application Integration for complex workflows, this is a significant trust boundary. The vulnerability was patched on September 11, 2026, so no customer action is required if you are on the latest version. This is a good reminder to keep your GCP services up to date, as deserialization flaws in cloud-native services can often lead to privilege escalation within the account.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-93327.mp3"}, {"cve_id": "CVE-2026-118029", "name": "CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas", "vendor": "", "product": "", "summary": "Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query", "published": "2026-10-28", "source": "AWS Security Bulletins", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/", "epss": 0.0, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "aws", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 4, "priority_reason": "cloud-account blast radius (aws); no exploitation reported", "recently_covered": false, "cwe": ["CWE-283"], "narrative": "The AWS SDK for pandas (awswrangler) has an unverified ownership issue in the default Athena query result location. This means that if you are using the library to run queries, the results might be written to a location that another user or process can access. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.0, but the nature of the flaw—improper access control—means it could lead to data leakage in multi-tenant environments. For data engineers using awswrangler in their pipelines, this is a subtle risk that could expose sensitive query results. There is no specific fix version mentioned in the bulletin, so you should check for updates to the library or ensure that your S3 buckets have strict access controls. This is a 'keep an eye on it' item, as it requires careful configuration rather than a simple patch.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-118029.mp3"}, {"cve_id": "CVE-2026-89049", "name": "CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent", "vendor": "", "product": "", "summary": "Read this article", "published": "2026-10-25", "source": "AWS Security Bulletins", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-107-aws/", "epss": 0.00662, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "aws", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 5, "priority_reason": "cloud-account blast radius (aws); no exploitation reported", "recently_covered": false, "cwe": ["CWE-1289", "CWE-918"], "narrative": "AWS Systems Manager Agent has a server-side request forgery (SSRF) vulnerability in its Session Manager port forwarding functionality. This allows an attacker to make requests to internal resources that should not be accessible from the agent. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00662, which is slightly higher than some other items, suggesting a moderate risk. For teams using SSM for remote access to EC2 instances, this could be a path to internal network reconnaissance. There is no fix version specified, so you should monitor for updates from AWS. In the meantime, ensure that your SSM endpoints are not exposed to untrusted networks and that you have strict security groups in place. This is a 'worth patching this week' item if you are running SSM agents in sensitive environments.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-89049.mp3"}, {"cve_id": "CVE-2026-89090", "name": "CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2", "vendor": "", "product": "", "summary": "Read this article", "published": "2026-10-25", "source": "AWS Security Bulletins", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-110-aws/", "epss": 0.00305, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "aws", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 6, "priority_reason": "cloud-account blast radius (aws); no exploitation reported", "recently_covered": false, "cwe": ["CWE-248"], "narrative": "The AWS SDK for Go v2 has a denial of service vulnerability in its event stream header decoder. This could allow an attacker to crash the SDK by sending malformed headers, which would disrupt any application relying on it for streaming data. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00305, which is low, but the impact on availability could be significant for critical services. For developers using the Go SDK in their Kubernetes workloads, this is a risk that could lead to pod restarts or service outages. There is no fix version specified, so you should check for updates to the SDK. This is a 'keep an eye on it' item, as it is more of a stability issue than a security breach, but it is still worth addressing to ensure the resilience of your cloud-native applications.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-89090.mp3"}, {"cve_id": "CVE-2026-115419", "name": "CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server", "vendor": "", "product": "", "summary": "Bulletin ID: 2026-146-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:00 PM PDT Description: Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI agents. The SDK includes an Agent2Agent (A2A) server component that exposes an agent over HTTP so other agents and clients can call it. We identified CVE-2026-115419, an", "published": "2026-10-22", "source": "AWS Security Bulletins", "source_url": "https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/", "epss": 0.00426, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "aws", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 7, "priority_reason": "cloud-account blast radius (aws); no exploitation reported", "recently_covered": false, "cwe": ["CWE-488"], "narrative": "The Strands Agents SDK A2A Server has an issue where data elements can be disclosed to the wrong session. This means that if multiple agents are interacting with the server, one agent’s data could be leaked to another. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00426, which is low, but the impact on data confidentiality could be high. For teams building multi-agent systems with Strands, this is a risk that could lead to sensitive information being exposed. There is no fix version specified, so you should check for updates to the SDK. This is a 'keep an eye on it' item, as it requires careful session management and isolation to prevent data leakage. Ensure that your agents are running in isolated environments and that you have strict access controls in place.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-115419.mp3"}, {"cve_id": "CVE-2026-105014", "name": "CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability", "vendor": "", "product": "", "summary": "Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.", "published": "2026-10-22", "source": "MSRC Security Update Guide", "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014", "epss": 0.00667, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "azure", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 8, "priority_reason": "cloud-account blast radius (azure); no exploitation reported", "recently_covered": false, "cwe": ["CWE-77"], "narrative": "Azure Pipelines has a remote code execution vulnerability due to improper neutralization of special elements in a command. This allows an unauthorized attacker to execute code over a network. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00667, which is moderate, suggesting a realistic risk if the pipeline is exposed to untrusted input. For teams using Azure DevOps for CI/CD, this is a significant risk, as a compromised pipeline could lead to the deployment of malicious code. There is no fix version specified, so you should monitor for updates from Microsoft. In the meantime, ensure that your pipelines are not processing untrusted input without proper sanitization. This is a 'worth patching this week' item if you are using Azure Pipelines in a production environment.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-105014.mp3"}, {"cve_id": "CVE-2026-108456", "name": "CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability", "vendor": "", "product": "", "summary": "Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.", "published": "2026-10-22", "source": "MSRC Security Update Guide", "source_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456", "epss": 0.00701, "ecosystem_match": 2, "layer": "cloud_account", "blast_radius": 4, "matched_term": "azure", "exploited": "unknown", "exploited_source": "", "exploitation": 0, "fix_available": null, "fix_version": "", "fix_availability": null, "priority_rank": 9, "priority_reason": "cloud-account blast radius (azure); no exploitation reported", "recently_covered": false, "cwe": ["CWE-918"], "narrative": "Azure AI Foundry has a server-side request forgery (SSRF) vulnerability that allows an authorized attacker to elevate privileges over a network. This means that if an attacker has access to the AI Foundry service, they could potentially make requests to internal resources that should not be accessible. It is a cloud_account layer issue with a blast radius of 4, and no exploitation is reported. The EPSS is 0.00701, which is the highest in this list, suggesting a higher risk. For teams using Azure AI Foundry for model deployment and management, this is a significant risk, as a compromised service could lead to privilege escalation within the Azure account. There is no fix version specified, so you should monitor for updates from Microsoft. This is a 'patch today' item if you are using Azure AI Foundry in a sensitive environment.", "audio_url": "/content/cybersecurity/audio/2026-10-29/CVE-2026-108456.mp3"}], "advisories": [{"source": "Kubernetes Official CVE feed", "title": "CVE-2026-76654", "url": "https://github.com/kubernetes/kubernetes/issues/142098", "published": "Mon, 14 Sep 2026 16:42:26 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-2270", "url": "https://github.com/kubernetes/kubernetes/issues/142097", "published": "Mon, 14 Sep 2026 16:42:20 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-19444", "url": "https://github.com/kubernetes/kubernetes/issues/141294", "published": "Mon, 10 Aug 2026 14:49:49 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-3865", "url": "https://github.com/kubernetes/kubernetes/issues/138319", "published": "Fri, 10 Apr 2026 17:54:42 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-4342", "url": "https://github.com/kubernetes/kubernetes/issues/137893", "published": "Thu, 19 Mar 2026 14:32:54 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-3864", "url": "https://github.com/kubernetes/kubernetes/issues/137797", "published": "Tue, 17 Mar 2026 05:54:49 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-3288", "url": "https://github.com/kubernetes/kubernetes/issues/137560", "published": "Mon, 09 Mar 2026 04:29:33 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2025-15566", "url": "https://github.com/kubernetes/kubernetes/issues/136789", "published": "Fri, 06 Feb 2026 02:54:24 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-24514", "url": "https://github.com/kubernetes/kubernetes/issues/136680", "published": "Mon, 02 Feb 2026 03:06:14 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-24513", "url": "https://github.com/kubernetes/kubernetes/issues/136679", "published": "Mon, 02 Feb 2026 03:06:04 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-24512", "url": "https://github.com/kubernetes/kubernetes/issues/136678", "published": "Mon, 02 Feb 2026 03:05:54 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2026-1580", "url": "https://github.com/kubernetes/kubernetes/issues/136677", "published": "Mon, 02 Feb 2026 03:05:43 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2025-14269", "url": "https://github.com/kubernetes/kubernetes/issues/135798", "published": "Wed, 17 Dec 2025 19:23:10 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2025-13281", "url": "https://github.com/kubernetes/kubernetes/issues/135525", "published": "Sun, 30 Nov 2025 23:08:37 +0000"}, {"source": "Kubernetes Official CVE feed", "title": "CVE-2025-9708", "url": "https://github.com/kubernetes/kubernetes/issues/134063", "published": "Mon, 15 Sep 2025 04:59:12 +0000"}, {"source": "GKE security bulletins", "title": "GCP-2026-071", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-071", "published": "2026-10-27T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-061", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-061", "published": "2026-09-09T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-058", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-058", "published": "2026-09-02T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-037", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-037", "published": "2026-06-18T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-033", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-033", "published": "2026-05-14T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-030", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-030", "published": "2026-05-11T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-027", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-027", "published": "2026-05-01T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-026", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-026", "published": "2026-04-30T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-025", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-025", "published": "2026-04-30T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-024", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-024", "published": "2026-04-28T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-023", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-023", "published": "2026-04-28T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-022", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-022", "published": "2026-04-16T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-020", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-020", "published": "2026-04-14T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-018", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-018", "published": "2026-04-07T00:00:00+00:00"}, {"source": "GKE security bulletins", "title": "GCP-2026-017", "url": "https://docs.cloud.google.com/kubernetes-engine/security-bulletins#gcp-2026-017", "published": "2026-04-02T00:00:00+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-074", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-074", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-073", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-073", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-072", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-072", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-071", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-071", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-070", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-070", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-069", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-069", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-068", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-068", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-067", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-067", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-066", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-066", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-065", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-065", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-064", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-064", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-063", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-063", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-062", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-062", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-061", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-061", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "Google Cloud security bulletins", "title": "GCP-2026-060", "url": "https://docs.cloud.google.com/support/bulletins/index#gcp-2026-060", "published": "2026-10-28T15:19:22.285131+00:00"}, {"source": "AWS Security Bulletins", "title": "Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-137-aws/", "published": "Thu, 15 Oct 2026 19:03:20 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-107-aws/", "published": "Sun, 25 Oct 2026 03:13:38 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-132-aws/", "published": "Fri, 09 Oct 2026 15:56:44 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-111-aws/", "published": "Fri, 11 Sep 2026 19:08:25 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-110-aws/", "published": "Sun, 25 Oct 2026 03:13:38 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-124-aws/", "published": "Fri, 02 Oct 2026 19:21:29 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-116-aws/", "published": "Tue, 22 Sep 2026 20:08:17 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/", "published": "Wed, 28 Oct 2026 15:40:38 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-146-aws/", "published": "Thu, 22 Oct 2026 20:07:11 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-129-aws/", "published": "Thu, 08 Oct 2026 17:43:09 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-140-aws/", "published": "Tue, 20 Oct 2026 20:19:42 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-133-aws/", "published": "Fri, 09 Oct 2026 18:13:24 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-131-aws/", "published": "Thu, 08 Oct 2026 19:44:26 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-149-aws/", "published": "Fri, 23 Oct 2026 19:09:22 +0000"}, {"source": "AWS Security Bulletins", "title": "CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-150-aws/", "published": "Sun, 25 Oct 2026 03:07:57 +0000"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014", "published": "Thu, 22 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456", "published": "Thu, 22 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83938", "published": "Thu, 22 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110063", "published": "Thu, 22 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-83943 Azure API Center Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83943", "published": "Wed, 14 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-70270 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70270", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-85916 Azure Active Directory Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85916", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-96204 Azure Arc Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-97794 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97794", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-69577 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69577", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-69454 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "MSRC Security Update Guide", "title": "CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922", "published": "Tue, 13 Oct 2026 07:00:00 -0700"}, {"source": "CISA (US)", "title": "CISA Adds Two Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/28/cisa-adds-two-known-exploited-vulnerabilities-catalog", "published": "Wed, 28 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-02", "published": "Tue, 27 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "EPICS Base", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01", "published": "Tue, 27 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "CISA Adds Two Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog", "published": "Tue, 27 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "CISA Adds Two Known Exploited Vulnerabilities to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog", "published": "Mon, 26 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "CISA Adds One Known Exploited Vulnerability to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog-0", "published": "Fri, 23 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "CISA Adds One Known Exploited Vulnerability to Catalog", "url": "https://www.cisa.gov/news-events/alerts/2026/10/23/cisa-adds-one-known-exploited-vulnerability-catalog", "published": "Fri, 23 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens RUGGEDCOM APE1808 Devices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-18", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens Capital Embedded AR Classic", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge Device Kit", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens WinCC", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-11", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens Industrial Edge App Publisher", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Siemens SIMATIC S7 Webserver API", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-10", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA (US)", "title": "Managing AI Token Consumption for Operational Resilience", "url": "https://www.cisa.gov/resources-tools/resources/managing-ai-token-consumption-operational-resilience", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-02", "published": "Tue, 27 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "EPICS Base", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01", "published": "Tue, 27 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens Software Center", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-03", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Kiloview E3 NDI Encoder", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-01", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens Industrial Edge App Publisher", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-02", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens Capital Embedded AR Classic", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-04", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens SENTRON 3NA COM Fuse", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-05", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens PSS(R)SINCAL", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-06", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens SIMATIC IPCs", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-07", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens APOGEE, TALON and Desigo PXC/PXM Products", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-08", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens Industrial Edge Device Kit", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-09", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens RUGGEDCOM CROSSBOW", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-12", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens WinCC", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-13", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens SIMATIC S7 PLCs Web Server", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-14", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "CISA ICS advisories", "title": "Siemens RUGGEDCOM CROSSBOW Station Access Controller", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-295-15", "published": "Thu, 22 Oct 26 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "From industry concern to practical action: the value of working with regulators", "url": "https://www.ncsc.gov.uk/blogs/industry-concern-practical-action-value-working-regulators", "published": "Tue, 27 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Critical security issue affecting PHP", "url": "https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php", "published": "Wed, 21 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Introducing a new AI chapter in the NCSC research problem book", "url": "https://www.ncsc.gov.uk/blogs/introducing-new-ai-chapter-ncsc-research-problem-book", "published": "Tue, 20 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Using TLS to protect data", "url": "https://www.ncsc.gov.uk/guidance/using-tls-to-protect-data", "published": "Thu, 15 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Post-quantum updates to our TLS guidance", "url": "https://www.ncsc.gov.uk/blogs/post-quantum-updates-to-our-tls-guidance", "published": "Thu, 15 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Help the NCSC understand how organisations approach external attack surface risk", "url": "https://www.ncsc.gov.uk/blogs/help-ncsc-understand-how-organisations-approach-external-attack-surface-risk", "published": "Mon, 12 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "China-linked malicious actors called out by UK and international partners for targeting sensitive data globally", "url": "https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data", "published": "Thu, 08 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Incident affecting ASOS customers", "url": "https://www.ncsc.gov.uk/news/incident-affecting-asos-customers", "published": "Tue, 06 Oct 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway", "url": "https://www.ncsc.gov.uk/news/exploitation-of-vulnerabilities-affecting-citrix-netscaler-adc-and-citrix-netscaler-gateway", "published": "Mon, 28 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "One does not simply defend agentically", "url": "https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically", "published": "Mon, 21 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Cyber Adversary Simulation (CyAS): scheme documents now available", "url": "https://www.ncsc.gov.uk/blogs/cyber-adversary-simulation-cyas-scheme-documents-now-available", "published": "Thu, 17 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Adversary simulation: what you need to know", "url": "https://www.ncsc.gov.uk/guidance/adversary-simulation-what-you-need-to-know", "published": "Thu, 17 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists", "url": "https://www.ncsc.gov.uk/news/uk-allies-expose-spyware-iranian-state-actors-target-dissidents-activists-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "Iranian cyber targeting of dissidents, activists and journalists", "url": "https://www.ncsc.gov.uk/news/iranian-cyber-targeting-of-dissidents-activists-and-journalists", "published": "Tue, 15 Sep 2026 12:00:00 +0000"}, {"source": "NCSC (UK)", "title": "The hidden risks of shadow AI", "url": "https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai", "published": "Mon, 07 Sep 2026 12:00:00 +0000"}, {"source": "OWASP GenAI Security Project", "title": "GenAI and Agentic AI Exploit Roundup Q3 2026", "url": "https://genai.owasp.org/2026/10/08/genai-and-agentic-ai-exploit-roundup-q3-2026/?utm_source=rss&utm_medium=rss&utm_campaign=genai-and-agentic-ai-exploit-roundup-q3-2026", "published": "Thu, 08 Oct 2026 12:07:42 +0000"}, {"source": "OWASP GenAI Security Project", "title": "OWASP GenAI Security Project Unveils 2026 Top 10 for LLM Applications, New Agent Control Standard and Sponsors as Community Tops 30,000 Members", "url": "https://genai.owasp.org/2026/09/01/owasp-genai-security-project-unveils-2026-top-10-for-llm-applications-new-agent-control-standard-and-sponsors-as-community-tops-30000-members/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-genai-security-project-unveils-2026-top-10-for-llm-applications-new-agent-control-standard-and-sponsors-as-community-tops-30000-members", "published": "Tue, 01 Sep 2026 23:36:47 +0000"}, {"source": "OWASP GenAI Security Project", "title": "GenAI and Agentic AI Exploit Roundup Q2 2026", "url": "https://genai.owasp.org/2026/07/08/genai-and-agentic-ai-exploit-roundup-q2-2026/?utm_source=rss&utm_medium=rss&utm_campaign=genai-and-agentic-ai-exploit-roundup-q2-2026", "published": "Thu, 09 Jul 2026 04:38:14 +0000"}, {"source": "OWASP GenAI Security Project", "title": "Memory Is a Feature. It Is Also an Attack Surface", "url": "https://genai.owasp.org/2026/05/13/memory-is-a-feature-it-is-also-an-attack-surface/?utm_source=rss&utm_medium=rss&utm_campaign=memory-is-a-feature-it-is-also-an-attack-surface", "published": "Thu, 14 May 2026 01:05:44 +0000"}, {"source": "OWASP GenAI Security Project", "title": "FinBot CTF Is Live: A Hands-On Companion to the OWASP GenAI Security Project", "url": "https://genai.owasp.org/2026/04/14/finbot-ctf-is-live-a-hands-on-companion-to-the-owasp-genai-security-project/?utm_source=rss&utm_medium=rss&utm_campaign=finbot-ctf-is-live-a-hands-on-companion-to-the-owasp-genai-security-project", "published": "Wed, 15 Apr 2026 06:15:10 +0000"}, {"source": "OWASP GenAI Security Project", "title": "OWASP GenAI Exploit Round-up Report Q1 2026", "url": "https://genai.owasp.org/2026/04/14/owasp-genai-exploit-round-up-report-q1-2026/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-genai-exploit-round-up-report-q1-2026", "published": "Wed, 15 Apr 2026 05:55:44 +0000"}, {"source": "OWASP GenAI Security Project", "title": "OWASP GenAI Security Project Expands AI Security Frameworks Ahead of RSA 2026, Celebrates Continued Sponsor Support", "url": "https://genai.owasp.org/2026/03/17/owasp-genai-security-project-expands-ai-security-frameworks-ahead-of-rsa-2026-celebrates-continued-sponsor-support/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-genai-security-project-expands-ai-security-frameworks-ahead-of-rsa-2026-celebrates-continued-sponsor-support", "published": "Wed, 18 Mar 2026 05:09:20 +0000"}, {"source": "OWASP GenAI Security Project", "title": "Evolving AI Transparency: The Journey of the AIBOM Generator and Its New Home at OWASP", "url": "https://genai.owasp.org/2025/12/18/evolving-ai-transparency-the-journey-of-the-aibom-generator-and-its-new-home-at-owasp/?utm_source=rss&utm_medium=rss&utm_campaign=evolving-ai-transparency-the-journey-of-the-aibom-generator-and-its-new-home-at-owasp", "published": "Thu, 18 Dec 2025 21:50:49 +0000"}, {"source": "OWASP GenAI Security Project", "title": "OWASP Top 10 for Agentic Applications – The Benchmark for Agentic Security in the Age of Autonomous AI", "url": "https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai", "published": "Wed, 10 Dec 2025 07:55:07 +0000"}, {"source": "OWASP GenAI Security Project", "title": "OWASP GenAI Security Project Releases Top 10 Risks and Mitigations for Agentic AI Security", "url": "https://genai.owasp.org/2025/12/09/owasp-genai-security-project-releases-top-10-risks-and-mitigations-for-agentic-ai-security/?utm_source=rss&utm_medium=rss&utm_campaign=owasp-genai-security-project-releases-top-10-risks-and-mitigations-for-agentic-ai-security", "published": "Wed, 10 Dec 2025 07:55:01 +0000"}, {"source": "MITRE ATLAS data releases", "title": "v2026.10", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.10", "published": "2026-10-28T22:55:37Z"}, {"source": "MITRE ATLAS data releases", "title": "v6.1.0", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v6.1.0", "published": "2026-10-28T22:35:03Z"}, {"source": "MITRE ATLAS data releases", "title": "v2026.09", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.09", "published": "2026-09-15T15:04:08Z"}, {"source": "MITRE ATLAS data releases", "title": "v2026.08", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.08", "published": "2026-09-01T01:04:18Z"}, {"source": "MITRE ATLAS data releases", "title": "v2026.07", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.07", "published": "2026-08-07T00:20:30Z"}, {"source": "MITRE ATLAS data releases", "title": "v2026.06", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.06", "published": "2026-06-30T23:21:10Z"}, {"source": "MITRE ATLAS data releases", "title": "v2026.05", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v2026.05", "published": "2026-05-27T20:06:34Z"}, {"source": "MITRE ATLAS data releases", "title": "v6.0.0", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v6.0.0", "published": "2026-05-27T18:05:14Z"}, {"source": "MITRE ATLAS data releases", "title": "v5.6.1", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v5.6.1", "published": "2026-05-06T01:59:35Z"}, {"source": "MITRE ATLAS data releases", "title": "v5.6.0", "url": "https://github.com/mitre-atlas/atlas-data/releases/tag/v5.6.0", "published": "2026-05-04T14:55:09Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "Vert.x PostgreSQL Client: Denial of Service via Spoofed Message Length", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/1200", "published": "2026-10-15T08:21:26Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "Vert.x MySQL Client: Denial of Service via Unbounded Multi-Packet Reassembly", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/1199", "published": "2026-10-15T08:23:17Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] ChainAuthHandler bypasses scope checks on pre-authenticated users", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/1068", "published": "2026-10-14T18:45:49Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-mail-client — CRLF email-header injection: CR/LF in user-supplied header values is written verbatim into the SMTP DATA section (CWE-93)", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/863", "published": "2026-10-14T18:51:39Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-json-schema — uniqueItems validation is O(n²) (unconditional pairwise loop): ~106 KiB of unauthenticated JSON amplifies to ~39 s of single-thread CPU → remote DoS", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/862", "published": "2026-10-15T08:24:50Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-http-proxy — BodyTransformer maxBufferedBytes bound is ineffective (per-chunk check instead of accumulated total): unbounded heap buffering → pre-auth OOM DoS", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/861", "published": "2026-10-15T07:25:23Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-core server WebSocket — the permessage-deflate inflater is built uncapped (Netty maxAllocation = 0): a single sub-64KB compressed frame inflates ~1029× before the message-size check → pre-auth decompression-bomb DoS", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/860", "published": "2026-10-15T07:21:41Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-mssql-client — unbounded TDS message reassembly (no cumulative-size cap): a malicious/MITM SQL Server that never sets END_OF_MESSAGE exhausts client direct memory → pre-auth OOM (DoS)", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/859", "published": "2026-10-15T08:10:42Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-pg-client — binary array decoder pre-allocates a Java array sized by a server-declared 32-bit dimension count (no cap) → malicious/MITM PostgreSQL server causes client OOM (DoS)", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/858", "published": "2026-10-15T08:14:41Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-grpc — unbounded gzip decompression bomb: maxMessageSize is enforced on the compressed length only, gzip is inflated with no decompressed-size cap → unauthenticated remote heap-exhaustion DoS", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/857", "published": "2026-10-15T08:29:13Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] vertx-db2-client — unsafe Java deserialization (ObjectInputStream.readObject) of DB2-server-controlled UDT column bytes with no ObjectInputFilter → client RCE / DoS from a malicious or MITM DB2 server", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/856", "published": "2026-10-15T08:12:44Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "Vert.x clients (vertx-redis-client + vertx-sql-client MySQL, 5.1.6): array pre-allocated to a server-declared length with no cap — heap-exhaustion DoS (two live PoCs; patch-gap vs Netty GHSA-5w86-c3rq-vjj7)", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/851", "published": "2026-10-15T07:32:25Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "[Eclipse Vert.x] Vert.x MQTT retains unbounded inbound QoS 2 publish state before PUBREL", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/592", "published": "2026-10-15T08:27:12Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "Glassfish SSRF vulnerability in /download/log endpoint", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/239", "published": "2026-06-15T12:41:53Z"}, {"source": "Eclipse Foundation vulnerability reports", "title": "Glassfish cross-side scripting in uploadFrame.jsf", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/230", "published": "2026-06-15T11:51:10Z"}], "industry": [{"title": "Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users", "why": "This supply-chain attack specifically targets AI coding assistants, meaning developers using these tools may be executing malicious code without realizing it.", "url": "https://cybersecuritynews.com/hackers-hijack-42-github-repositories/", "source": "CyberSecurityNews"}, {"title": "CISA KEV: LiteLLM MCP bypass, one-char bearer token", "why": "The addition of a critical MCP authentication bypass to the Known Exploited Vulnerabilities catalog highlights a specific and urgent risk for teams integrating LLMs via Model Context Protocol.", "url": "https://www.orcarouter.ai/blog/2026-09-02-litellm-mcp-auth-bypass-kev", "source": "OrcaRouter"}, {"title": "What happens when the agent is long gone, but its access key lives on?", "why": "This article addresses the operational challenge of managing ephemeral AI agent credentials, which is a critical gap in current cloud identity and access management strategies.", "url": "https://thenewstack.io/governing-ai-agent-credentials/", "source": "The New Stack — Security"}, {"title": "Scale agents securely with IAM Helper Agent Skills and MCP Tools", "why": "Google provides a concrete architectural pattern for securing autonomous agents in cloud environments, directly addressing the identity and permission challenges of agentic workflows.", "url": "https://cloud.google.com/blog/products/identity-security/scale-agents-securely-with-iam-helper-agent-skills-and-mcp-tools/", "source": "Google Cloud security blog"}, {"title": "Node2Shell (CVE-2026-111497): Detecting the Node.js Brotli RCE", "why": "This critical remote code execution vulnerability affects Node.js and its underlying Brotli decoder, impacting a vast number of cloud-native applications and serverless functions.", "url": "https://webflow.sysdig.com/blog/node2shell-cve-2026-111497-detecting-the-node-js-brotli-rce", "source": "Sysdig"}, {"title": "The Pwn Request Reckoning: What Still Works Against GitHub Actions", "why": "Wiz details the residual attack surface in GitHub Actions after recent security updates, providing essential guidance for securing CI/CD pipelines that are central to cloud-native development.", "url": "https://www.wiz.io/blog/github-actions-security-pwn-request-reckoning", "source": "Wiz"}, {"title": "Prompt Injection in C#: Attack and Harden Your .NET AI Agent", "why": "This video offers a practical, hands-on demonstration of attacking and defending .NET-based AI agents, providing actionable techniques for engineers building in that ecosystem.", "url": "https://www.youtube.com/watch?v=9xpBYKuMQxU", "source": "YouTube"}, {"title": "Bias in Qwen3-Coder Model", "why": "This research reveals that AI coding models can exhibit geopolitical bias that affects the security of generated code, a subtle but significant risk for teams using open-source LLMs in their development pipelines.", "url": "https://www.schneier.com/blog/archives/2026/10/bias-in-qwen3-coder-model.html", "source": "Schneier on Security"}], "iocs": [], "iobs": [{"behaviour": "exploitation of vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE", "based_on": "CWE-183", "cve": "CVE-2026-115915", "attack_technique": null}, {"behaviour": "exploitation of vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE", "based_on": "CWE-20", "cve": "CVE-2026-115915", "attack_technique": null}, {"behaviour": "untrusted deserialization", "based_on": "CWE-502", "cve": "CVE-2026-115912", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas", "based_on": "CWE-283", "cve": "CVE-2026-118029", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent", "based_on": "CWE-1289", "cve": "CVE-2026-89049", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-89049", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2", "based_on": "CWE-248", "cve": "CVE-2026-89090", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server", "based_on": "CWE-184", "cve": "CVE-2026-115845", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server", "based_on": "CWE-488", "cve": "CVE-2026-115419", "attack_technique": null}, {"behaviour": "exploitation of CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability", "based_on": "CWE-77", "cve": "CVE-2026-105014", "attack_technique": null}, {"behaviour": "server-side request forgery (SSRF) callbacks", "based_on": "CWE-918", "cve": "CVE-2026-108456", "attack_technique": null}], "sources_failed": [], "quiet_week": false, "byline": "Curated for you by Geek with the Peak", "_text_model": "dgx/vllm/qwen3.8-27b-nvfp4", "remediation": {"dropped": ["top10.6"], "reasons": ["top10.6: Article cuts off mid-sentence ('e…') and claims 'incomplete validation in the Python code validator' without citing CWE-184 or the bulletin ID 2026-149-AWS from ground truth; also implies the flaw is in the *validator* whereas ground truth says 'incomplete validation in the run_script Python sandbox' — ambiguous phrasing, but more critically, the truncated sentence constitutes an incomplete/fabricated claim."], "judge_model": "m3/mlx/qwen3-coder-next-4bit", "degraded": false}, "rubric_verdict": "APPROVE", "rubric_reasons": [], "rubric_judge": "m3/mlx/qwen3-coder-next-4bit"}