IT security 2026-10-30

Level Critical — 100/100 — 2026-10-30

Critical day: 30 stories ranked, 10 of the top 10 reported as actively exploited, 4 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cisco Catalyst SD-WAN authentication bypass exploited by APT (94/100).

1. Cisco Catalyst SD-WAN authentication bypass exploited by APT — 94/100 (CVE-2026-20127)
2. PHP out-of-memory flaw can allow remote code execution — 89/100 (CVE-2026-109618)
3. Cisco ASA and FTD SSL VPN flaw exploited to crash affected firewalls — 83/100 (CVE-2026-76418)
4. GitLab CE/EE code execution flaw CVE-2026-97229 targeted in the wild, including an attempt against Alpine Linux's GitLab — 82/100 (CVE-2026-97229)
5. Linux kernel 'Fragnesia' flaw CVE-2026-46300 chained with PHP2Shell bugs in the wild to gain root — 77/100 (CVE-2026-46300)
6. Attackers probe patched Oracle E-Business Suite SQL injection flaw — 70/100 (CVE-2026-101767)
7. Linux Kernel TCP Flaw (CVE-2026-98432) — 70/100 (CVE-2026-98432)
8. MLflow Server-Side Request Forgery Vulnerability — 69/100 (CVE-2026-64849)
9. Broadcom VMWare ESX Insufficient Logging Vulnerability — 67/100 (CVE-2026-41709)
10. Massive search-hijacking campaign uses 319 Chrome extensions — 65/100