IT security 2026-10-21

Level Critical — 100/100 — 2026-10-21

Critical day: 30 stories ranked, 7 of the top 10 reported as actively exploited, 6 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Qilin and INC ransomware groups exploit PAN-OS authentication bypass CVE-2026-0257 to establish unauthorized VPN connections (98/100).

  1. Qilin and INC ransomware groups exploit PAN-OS authentication bypass CVE-2026-0257 to establish unauthorized VPN connections — 98/100 (CVE-2026-0257)
  2. PHP updates address unauthenticated remote code execution in web-serving installations — 84/100 (CVE-2026-109618)
  3. EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability — 83/100 (CVE-2026-106931)
  4. Plex Media Server arbitrary file write forms part of an exploited vulnerability chain — 82/100 (CVE-2026-96656)
  5. Siemens Software Center DLL loading flaw exploited in ClickFix attacks — 81/100 (CVE-2026-110936)
  6. Plex URI handling flaw enables calls to other plugins in an exploited chain — 76/100 (CVE-2026-96654)
  7. Authenticated Plex SSRF vulnerability contributes to an exploited chain — 71/100 (CVE-2026-96655)
  8. Exploited Plex2Shell vulnerabilities include attacker-directed server requests — 64/100 (CVE-2026-96652)
  9. Oracle Access Manager authentication component vulnerable to unauthenticated HTTP compromise — 52/100 (CVE-2026-87337)
  10. Oracle E-Business Suite Workflow flaw permits unauthenticated HTTP compromise — 51/100 (CVE-2026-101809)