https://0daynews.com/articles/2026-10-26-vllm-cve-2026-116177-memory-exhaustion/ 0dayNews en 2026-10-26T06:00:00.000Z vLLM Patches Unauth Memory DoS in 0.25.0 vllm, CVE-2026-116177, memory exhaustion, denial of service, AI inference, LLM security, Nemotron-VL https://0daynews.com/articles/2026-10-26-vllm-cve-2026-116177-memory-exhaustion/cover-3fc298ef65c8b39c.jpg vLLM Patches Unauth Memory DoS in 0.25.0 https://0daynews.com/articles/2026-10-26-php2shell-government-breach-ai-post-exploit/ 0dayNews en 2026-10-26T04:00:00.000Z PHP2Shell Hits Government Network with AI Post-Exploit Tools PHP2Shell, CVE-2026-109618, CVE-2026-109619, government breach, AI-assisted hacking, PHP, post-exploitation https://0daynews.com/articles/2026-10-26-php2shell-government-breach-ai-post-exploit/cover-ae441313c9046e6a.jpg PHP2Shell Hits Government Network with AI Post-Exploit Tools https://0daynews.com/articles/2026-10-25-postiz-cve-2026-115933-token-confusion-admin/ 0dayNews en 2026-10-25T12:00:00.000Z Postiz Patches Critical Token Confusion Bug, CVSS 9.9 postiz, token confusion, authentication bypass, CVE-2026-115933, privilege escalation, social media management https://0daynews.com/articles/2026-10-25-postiz-cve-2026-115933-token-confusion-admin/cover-5bb394f4a2b4fd81.jpg Postiz Patches Critical Token Confusion Bug, CVSS 9.9 https://0daynews.com/articles/2026-10-25-openai-ai-agents-vm-escape-cache-side-channel/ 0dayNews en 2026-10-25T10:00:00.000Z OpenAI AI Agents Escaped VMs, Communicated Across Sandboxes openai, ai-security, vm-escape, sandbox, side-channel, reinforcement-learning, containment https://0daynews.com/articles/2026-10-25-openai-ai-agents-vm-escape-cache-side-channel/cover-39a760fe2fb7a542.jpg OpenAI AI Agents Escaped VMs, Communicated Across Sandboxes https://0daynews.com/articles/2026-10-25-oracle-java-jsse-cve-2026-114820-critical/ 0dayNews en 2026-10-25T08:00:00.000Z Oracle Java JSSE Flaw Hits All Supported Versions, CVSS 9.1 oracle, java, jsse, tls, cve-2026-114820, graalvm, critical-patch-update https://0daynews.com/articles/2026-10-25-oracle-java-jsse-cve-2026-114820-critical/cover-b0b37d2341e20951.jpg Oracle Java JSSE Flaw Hits All Supported Versions, CVSS 9.1 https://0daynews.com/articles/2026-10-25-blackx-uefi-bootkit-apt41-secure-boot-bypass/ 0dayNews en 2026-10-25T06:00:00.000Z BlackX Bootkit Bypasses Secure Boot on Patched Windows 11 uefi, secure-boot, apt41, cve-2022-21894, bootkit, brass-typhoon, espionage https://0daynews.com/articles/2026-10-25-blackx-uefi-bootkit-apt41-secure-boot-bypass/cover-0bcac644dcfd4426.jpg BlackX Bootkit Bypasses Secure Boot on Patched Windows 11 https://0daynews.com/articles/2026-10-25-ruby-onigmo-regex-gitlab-rce-root-cause/ 0dayNews en 2026-10-25T04:00:00.000Z Ruby Patches Regex Engine Behind Four Critical GitLab RCEs ruby, onigmo, regex, gitlab, rce, CVE-2026-110264, CVE-2026-97229 https://0daynews.com/articles/2026-10-25-ruby-onigmo-regex-gitlab-rce-root-cause/cover-435db8ee6e7a0be0.jpg Ruby Patches Regex Engine Behind Four Critical GitLab RCEs https://0daynews.com/articles/2026-10-24-metasploit-langflow-six-modules-critical-rce/ 0dayNews en 2026-10-24T14:00:00.000Z Metasploit Ships Six Exploit Modules for Langflow Langflow, Metasploit, RCE, CVE-2026-10134, exploit modules, LLM security https://0daynews.com/articles/2026-10-24-metasploit-langflow-six-modules-critical-rce/cover-4d57be749b9a8202.jpg Metasploit Ships Six Exploit Modules for Langflow https://0daynews.com/articles/2026-10-24-brotli-decoder-nodejs-rce-node2shell/ 0dayNews en 2026-10-24T12:30:00.000Z Brotli Decoder Flaw Hits Node.js, Bun, Python: RCE Confirmed brotli, nodejs, rce, supply-chain, memory-corruption, bun, python https://0daynews.com/articles/2026-10-24-brotli-decoder-nodejs-rce-node2shell/cover-70b5217e07269bb1.jpg Brotli Decoder Flaw Hits Node.js, Bun, Python: RCE Confirmed https://0daynews.com/articles/2026-10-24-cisa-kev-collabora-velocloud-oct26-deadline/ 0dayNews en 2026-10-24T10:00:00.000Z CISA: Collabora and VeloCloud Flaws Hit KEV cisa-kev, collabora-online, arista-velocloud, CVE-2026-110447, CVE-2026-114625, known-exploited-vulnerabilities, patch-deadline https://0daynews.com/articles/2026-10-24-cisa-kev-collabora-velocloud-oct26-deadline/cover-8c74a6a510cbdc2f.jpg CISA: Collabora and VeloCloud Flaws Hit KEV