ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and...

CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now

Executive Summary CVE-2026-68820 is an actively exploited Windows vulnerability listed in CISA’s Known Exploited Vulnerabilities KEV Catalog, with a remediation deadline as suggested by CISA BOD 26-04. CISA BOD 26-04 introduces risk-based remediation timelines ranging from 3 to 14 days, increasin...

Linux Distros Unpatched Vulnerability : CVE-2026-72245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be...

Linux Distros Unpatched Vulnerability : CVE-2026-74413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pcigetdrvdata type in AER handlers rtw89 stores an ieee80211hw pointe...

Linux Distros Unpatched Vulnerability : CVE-2026-72479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read retur...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101995 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would...

Linux Distros Unpatched Vulnerability : CVE-2026-72050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with...

Linux Distros Unpatched Vulnerability : CVE-2026-72074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without...

Linux Distros Unpatched Vulnerability : CVE-2026-72158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl: add bounds check in dfhgetparamsize dfhgetparamsize can return a parameter size larger than the feature region because the loop bounds check is...

Linux Distros Unpatched Vulnerability : CVE-2026-72047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit ca8210testintdriverwrite and ca8210testintuserread exchange a kmalloc'd buffer pointer through a...

Linux Distros Unpatched Vulnerability : CVE-2026-72409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the...

Linux Distros Unpatched Vulnerability : CVE-2026-72269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: uvesafb: fix potential memory leak in uvesafbprobe Due to an incorrect goto label, memory allocated for modedb and modelist in uvesafbvbeinit is not free...

Linux Distros Unpatched Vulnerability : CVE-2026-72171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If ...

Linux Distros Unpatched Vulnerability : CVE-2026-72313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: Only consider active CRTCs for vblank sync Only synchronize fbdev output to t...

CVE-2026-68478

A flaw was found in the Linux kernel's Memory Stick block driver memstick: msblock. A malicious Memory Stick card, crafted to report an excessive number of blocks, can cause the driver to write beyond the bounds of an allocated memory structure. This out-of-bounds write can lead to memory...

PT-2026-76688

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100550 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix use-after-free in powersupplychanged Using the devm variant for...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099790 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100743 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...