Source intelligence
425 collected source records. Original advisories and security research.
300 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| ARTEX and Friends: Enter Agentic Offensive Frameworks Written by: Aurora Blum, David Mainor, Rohit Nambiar, Omar ElAhdan, Matthew McWhirt, Will Silverstone, Bhavesh Dhake, Chris Busse Introduction Recent intrusions in which threat actors have been observed weaponizing agent… |
Google Threat Intelligence | None reported |
|
| Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-111357 — Ivanti / Connect Secure. Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vu… |
CISA KEV | ||
| Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability CVE-2026-118527 — Ivanti / Connect Secure. Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-control… |
CISA KEV | ||
| Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CVE-2026-76418 — Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software. Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnera… |
CISA KEV | ||
| GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CVE-2026-97229 — GitLab / Community Edition and Enterprise Edition. GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execu… |
CISA KEV | ||
| mcp-server-git: nested gitdir file bypasses --repository confinement GHSA: GHSA-w766-5x43-whvw Reported severity: medium Advisory package entry 1: Affected package: mcp-server-git (pip) Affected versions: < 2026.10.28 Patched version: 2026.10.28 Advisory description: mcp-server-git: neste… |
MCP server advisories | GHSA-W766-5X43-WHVW |
|
| FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime The FBI seized virtualine.net, the main website of a bulletproof hosting provider linked to ransomware operators, stolen-data markets, and other cybercrime services. Announced on October 27, 2026, the court-authorized ac… |
Cyber Security News | None reported |
|
| False Protection, Emptied Accounts: The Seven Android Trojan Families Targeting Indian Banking Apps Introduction Group-IB’s Threat Intelligence team has uncovered a sophisticated Android malware campaign that has been systematically targeting India’s financial services sector since July 2025. It is orchestrated by a fi… |
Group-IB | None reported |
|
| Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 — Linux / Kernel. Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragme… |
CISA KEV | ||
| Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-41709 — Broadcom / VMware ESX. Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. CISA req… |
CISA KEV | ||
| Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted attacks. Released on October 26, 2026, the updates bring security fixes to older devic… |
Cyber Security News | ||
| Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison A 36-year-old Ukrainian national was sentenced to 70 months in prison for participating in a string of ransomware attacks targeting various critical infrastructure operators and businesses from the middle of 2018 to late… |
CyberScoop | None reported |
|
| Google Brotli Unchecked Return Value Vulnerability CVE-2026-111497 — Google / Brotli. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents… |
CISA KEV | ||
| Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-48356 — Adobe / Commerce and Magento. Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the curre… |
CISA KEV | ||
| VU#701544: Retraction of mpc-lib hardened derivation fails to protect ancestor isolation Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation proper… |
CERT/CC | None reported |
|
| VU#128947: COVESA vsomeip excessive memory allocation in reliable (TCP) endpoint buffer handling Overview vsomeip, COVESA's open source implementation of the SOME/IP automotive communication middleware, contained a memory allocation vulnerability present in versions 3.7.3 and below. A vsomeip reliable (TCP) SOME/IP … |
CERT/CC | ||
| TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace GHSA: GHSA-5xjx-9qx6-jcrv CVE: CVE-2026-88968 Reported severity: high Advisory package entry 1: Affected package: @anthropic-ai/claude-code (npm) Affected versions: < 2.1.251 Patched version: 2.1.251 Advisory description… |
Claude Code advisories | CVE-2026-88968GHSA-5XJX-9QX6-JCRV |
|
| PHP Stale Internal Request-State Vulnerability CVE-2026-109619 — PHP Group / PHP. PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply mitigations in accordance with vendor instru… |
CISA KEV | ||
| PHP Memory Corruption Vulnerability CVE-2026-109618 — PHP Group / PHP. PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply mitigations in accordance with vendor instructi… |
CISA KEV | ||
| Cross-Origin Environment Variable Exfiltration in @modelcontextprotocol/server-everything GHSA: GHSA-mvf5-2qqv-rg3c Reported severity: medium Advisory package entry 1: Affected package: @modelcontextprotocol/server-everything (npm) Affected versions: >= 2025.9.24, <= 2026.8.31 Patched version: Not specified b… |
MCP server advisories | GHSA-MVF5-2QQV-RG3C |
|
| @modelcontextprotocol/server-filesystem list_directory_with_sizes follows symlinks and leaks outside-directory file metadata GHSA: GHSA-hhwq-wxfx-cj7g Reported severity: low Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: >= 2025.7.1, <= 2026.8.31 Patched version: Not specified by ad… |
MCP server advisories | GHSA-5CGR-J3JF-JW3VGHSA-9XWC-HFWC-8W59GHSA-HC55-P739-J48WGHSA-HHWQ-WXFX-CJ7G |
|
| Parent-Directory Fallback TOCTOU in @modelcontextprotocol/server-filesystem Permits Arbitrary File Write Outside allowedDirectories GHSA: GHSA-53mr-w429-c597 Reported severity: low Advisory package entry 1: Affected package: @modelcontextprotocol/server-filesystem (npm) Affected versions: >= 2025.1.14, <= 2026.8.31 Patched version: Not specified by a… |
MCP server advisories | ||
| fetch: private-address guard bypass via IDNA hostnames (check and connect resolve different names) GHSA: GHSA-v38p-wf49-hx2j Reported severity: medium Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 2026.10.10, <= 2026.10.19 Patched version: 2026.10.24 Advisory description: Sum… |
MCP server advisories | CVE-2026-104120GHSA-V38P-WF49-HX2J |
|
| fetch server: SSRF guard treats the well-known NAT64 prefix 64:ff9b::/96 as public, so a metadata address is reachable on NAT64/DNS64 egress GHSA: GHSA-66qx-2266-pmj6 Reported severity: low Advisory package entry 1: Affected package: mcp-server-fetch (pip) Affected versions: >= 2026.10.10, <= 2026.10.19 Patched version: 2026.10.24 Advisory description: Summar… |
MCP server advisories | GHSA-66QX-2266-PMJ6 |