Oct 30: Desk Briefing
Oct 30 security desk briefing covering 4 published reports, with links to the underlying coverage and available primary records.
- CISA added GitLab's CVSS 10.0 RCE to KEV after an attempted attack on Alpine Linux's instance. Federal deadline is Nov 1. Patch, then check for crashes.
- Drupal says CVE-2026-118539, a highly critical Commerce Core access bypass, is exploited in the wild. Update to 3.3.13 or 8.x-2.41 and audit your orders.
- Anthropic demonstrated remote root execution through Linux CVE-2026-98432 on MPTCP listeners. Upstream fixes exist; distribution patch status varies.
Oct 30’s desk briefing covers 4 reports published that day. Follow each report for its sourcing and any later updates.
-
GitLab CVE-2026-97229 Hit Alpine Linux, Now in KEV. CISA added GitLab’s CVSS 10.0 RCE to KEV after an attempted attack on Alpine Linux’s instance. Federal deadline is Nov 1. Patch, then check for crashes. Sources: Alpine’s incident report, CISA KEV catalog.
-
Drupal Commerce Core Bypass Exploited, Patch 3.3.13. Drupal says CVE-2026-118539, a highly critical Commerce Core access bypass, is exploited in the wild. Update to 3.3.13 or 8.x-2.41 and audit your orders.
-
Linux TCP Flaw Allows Remote Root on MPTCP Listeners. Anthropic demonstrated remote root execution through Linux CVE-2026-98432 on MPTCP listeners. Upstream fixes exist; distribution patch status varies. Sources: Linux CVE record, Red Hat’s October 30 bulletin, CVE page.
-
FBI Seizes Virtualine Bulletproof Hosting Domain. The FBI seized virtualine.net, a Russian-speaking bulletproof host tied to ransomware and StealC operators. A domain seizure alone does not prove it is offline.