CVE-2025-55640: Heap Buffer Overflow in GPAC/MP4Box via stbl_AddSize on crafted MP4 with corrupted sample metadata
CVE-2025-55640oss-security
Vulnerabilities and CVEs
Sat 17 Oct 20267 entries
Drupal patches critical RCE flaws, warns exploits may emerge soon
BleepingComputer
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
Security Affairs
Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
oss-security Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
oss-security Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
CVE-2026-110752CVE-2026-110753oss-security Fri 16 Oct 202613 entries
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
CVE-2026-88771Zscaler ThreatLabz
Google security advisory (AV26-1060)
Canadian Centre for Cyber Security
Critical BlockStrap flaw lets hackers run code on Magento servers
CVE-2026-103849BleepingComputer
BMC Helix security advisory (AV26-1059)
Canadian Centre for Cyber Security Progress security advisory (AV26-1058)
Canadian Centre for Cyber Security 
AL26-025 - Critical vulnerability impacting BeyondTrust Remote Support – CVE-2026-102764
CVE-2026-102764Canadian Centre for Cyber Security Infinity Core: Linux Kernel Core LPEs
oss-security CVE-2026-104715: cifs-utils 4.2-7.8 mount-option injection in mount.cifs
CVE-2026-104715oss-security