https://0daynews.com/articles/2026-10-25-postiz-cve-2026-115933-token-confusion-admin/ 0dayNews en 2026-10-25T12:00:00.000Z Postiz Patches Critical Token Confusion Bug, CVSS 9.9 postiz, token confusion, authentication bypass, CVE-2026-115933, privilege escalation, social media management https://0daynews.com/articles/2026-10-25-postiz-cve-2026-115933-token-confusion-admin/cover-5bb394f4a2b4fd81.jpg Postiz Patches Critical Token Confusion Bug, CVSS 9.9 https://0daynews.com/articles/2026-10-25-openai-ai-agents-vm-escape-cache-side-channel/ 0dayNews en 2026-10-25T10:00:00.000Z OpenAI AI Agents Escaped VMs, Communicated Across Sandboxes openai, ai-security, vm-escape, sandbox, side-channel, reinforcement-learning, containment https://0daynews.com/articles/2026-10-25-openai-ai-agents-vm-escape-cache-side-channel/cover-39a760fe2fb7a542.jpg OpenAI AI Agents Escaped VMs, Communicated Across Sandboxes https://0daynews.com/articles/2026-10-25-oracle-java-jsse-cve-2026-114820-critical/ 0dayNews en 2026-10-25T08:00:00.000Z Oracle Java JSSE Flaw Hits All Supported Versions, CVSS 9.1 oracle, java, jsse, tls, cve-2026-114820, graalvm, critical-patch-update https://0daynews.com/articles/2026-10-25-oracle-java-jsse-cve-2026-114820-critical/cover-b0b37d2341e20951.jpg Oracle Java JSSE Flaw Hits All Supported Versions, CVSS 9.1 https://0daynews.com/articles/2026-10-25-blackx-uefi-bootkit-apt41-secure-boot-bypass/ 0dayNews en 2026-10-25T06:00:00.000Z BlackX Bootkit Bypasses Secure Boot on Patched Windows 11 uefi, secure-boot, apt41, cve-2022-21894, bootkit, brass-typhoon, espionage https://0daynews.com/articles/2026-10-25-blackx-uefi-bootkit-apt41-secure-boot-bypass/cover-0bcac644dcfd4426.jpg BlackX Bootkit Bypasses Secure Boot on Patched Windows 11 https://0daynews.com/articles/2026-10-25-ruby-onigmo-regex-gitlab-rce-root-cause/ 0dayNews en 2026-10-25T04:00:00.000Z Ruby Patches Regex Engine Behind Four Critical GitLab RCEs ruby, onigmo, regex, gitlab, rce, CVE-2026-110264, CVE-2026-97229 https://0daynews.com/articles/2026-10-25-ruby-onigmo-regex-gitlab-rce-root-cause/cover-435db8ee6e7a0be0.jpg Ruby Patches Regex Engine Behind Four Critical GitLab RCEs https://0daynews.com/articles/2026-10-24-metasploit-langflow-six-modules-critical-rce/ 0dayNews en 2026-10-24T14:00:00.000Z Metasploit Ships Six Exploit Modules for Langflow Langflow, Metasploit, RCE, CVE-2026-10134, exploit modules, LLM security https://0daynews.com/articles/2026-10-24-metasploit-langflow-six-modules-critical-rce/cover-4d57be749b9a8202.jpg Metasploit Ships Six Exploit Modules for Langflow https://0daynews.com/articles/2026-10-24-brotli-decoder-nodejs-rce-node2shell/ 0dayNews en 2026-10-24T12:30:00.000Z Brotli Decoder Flaw Hits Node.js, Bun, Python: RCE Confirmed brotli, nodejs, rce, supply-chain, memory-corruption, bun, python https://0daynews.com/articles/2026-10-24-brotli-decoder-nodejs-rce-node2shell/cover-70b5217e07269bb1.jpg Brotli Decoder Flaw Hits Node.js, Bun, Python: RCE Confirmed https://0daynews.com/articles/2026-10-24-cisa-kev-collabora-velocloud-oct26-deadline/ 0dayNews en 2026-10-24T10:00:00.000Z CISA: Collabora and VeloCloud Flaws Hit KEV cisa-kev, collabora-online, arista-velocloud, CVE-2026-110447, CVE-2026-114625, known-exploited-vulnerabilities, patch-deadline https://0daynews.com/articles/2026-10-24-cisa-kev-collabora-velocloud-oct26-deadline/cover-8c74a6a510cbdc2f.jpg CISA: Collabora and VeloCloud Flaws Hit KEV https://0daynews.com/articles/2026-10-24-inc-gentlemen-ai-ransomware-phantom-agents/ 0dayNews en 2026-10-24T08:00:00.000Z AI Agents Ran INC and Gentlemen Ransomware Intrusions ransomware, AI agents, INC ransomware, threat-intel, SOCRadar, Phantom, WormGPT https://0daynews.com/articles/2026-10-24-inc-gentlemen-ai-ransomware-phantom-agents/cover-53090af3d429faba.jpg AI Agents Ran INC and Gentlemen Ransomware Intrusions https://0daynews.com/articles/2026-10-24-hpe-arubaos-72-cves-eight-max-severity/ 0dayNews en 2026-10-24T06:00:00.000Z HPE Patches 72 ArubaOS Flaws, Eight at Max Severity ArubaOS, HPE, authentication bypass, remote code execution, CVE-2026-79852, network security, patch https://0daynews.com/articles/2026-10-24-hpe-arubaos-72-cves-eight-max-severity/cover-208f12ba4679db39.jpg HPE Patches 72 ArubaOS Flaws, Eight at Max Severity https://0daynews.com/articles/2026-10-24-php-new-unpatched-rce-non-default-config/ 0dayNews en 2026-10-24T00:02:00.000Z PHP Warns of New Unpatched RCE, No Patch Available PHP, remote code execution, unpatched vulnerability, web server security, mitigation, PHP2Shell https://0daynews.com/articles/2026-10-24-php-new-unpatched-rce-non-default-config/cover-59e7531a0e907732.jpg PHP Warns of New Unpatched RCE, No Patch Available