CriticalExploited in the wild
PHP2Shell: CVE-2026-109618 and CVE-2026-109619, two PHP RCE flaws, get an emergency release today
Fix Patched in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35
The Week · Oct 19 to Oct 25
Every tool and agent you trust with your keys now has to be treated as an insider.
131 stories across 7 briefings. The headline is from Tue, the busiest day.
Day by day
All weeks →Deadlines that week · 7
All deadlines →18days ago
Mon Oct 19
CISA KEV due date for FortiOS CVE-2025-61624
Confirm the April 2026 fix is applied
In the digest16days ago
Wed Oct 21, 14:00 UTC
PHP out-of-cycle security release for two critical flaws
Reserve a patch window; read the official advisory for fixed versions
In the digest15days ago
Thu Oct 22
Gemini API shutdown of veo-3.1-generate-preview, veo-3.1-fast-generate-preview, veo-3.1-lite-generate-preview and gemini-omni-flash-preview (earliest possible date)
Move to gemini-omni-1.1-flash
In the digest14days ago
Fri Oct 23
OpenAI API shutdown of o1, o1-pro, o3-mini, o4-mini, gpt-4, gpt-4-turbo, gpt-4.1-nano, gpt-3.5-turbo, gpt-image-1 and matching fine-tunes
Repoint per OpenAI's mapping
OpenAI ↗14days ago
Thu-Fri Oct 22-23
AGNTCon + MCPCon North America
Watch for spec and SDK news
Linux Foundation ↗14days ago
Fri Oct 23
Gemini API deep-research-pro-preview-12-2025 agent shuts down
Change agent in interactions.create
Gemini API ↗14days ago
Fri Oct 23
MiniMax M3.1 Flash open weights expected (SGLang added day-0 support Oct 22; license not stated)
Line up an eval
SGLang ↗Security · 24
All security →CriticalExploited in the wild
Brotli CVE-2026-111497 reaches Bun, Python's Brotli packages, Envoy and Istio, beyond the Node.js fix
Fix Fixed in vendor Brotli updates; federal deadline Nov 10
CriticalExploited in the wild
Update — LiteLLM's breach began with a master key leaked in May and never revoked
Fix Clean images restored; 1.107.0 quarantined
CriticalExploited in the wild
CISA adds Collabora Online CVE-2026-110447 and Arista VeloCloud CVE-2026-114625 to its exploited list
Fix Patched in 26.4.303 and 5.2.3.18 / 6.1.3.10 / 6.4.2.12
CriticalExploited in the wild
LiteLLM 1.107.0 on PyPI and Docker steals cloud and AI credentials
Fix Fixed: package quarantined
HighExploited in the wild
OVHcloud CLI releases v0.11.0 to v0.15.0 were swapped for a secret-stealing build
Fix Fixed: v0.16.0 (immutable release)
HighExploited in the wild
A Chinese-speaking attacker pointed AI agents at exposed Carin instances and broke into 100+ company sites
Fix Fix: no patch; do not expose agent platforms
HighExploited in the wild
Fake "Apex Accelerator" npm packages steal data and hijack coding-agent traffic (REF8801)
Fix Packages and repositories are no longer accessible
Show 16 moreHide
MediumExploited in the wild
BlackX bootkit abuses Baton Drop, CVE-2022-21894, to bypass Secure Boot on patched Windows machines
Fix Fix: Windows update plus manual DBX revocation
CriticalExploitation unknown
GitLab CVE-2026-110264: unauthenticated RCE through a regular-expression integer overflow
Fix Patched in Ruby 4.0.9, 3.4.12, 3.3.13
CriticalExploitation unknown
Wasmtime CVE-2026-115889: a Cranelift index overflow lets crafted WebAssembly escape the sandbox
Fix Patched in v43
Critical
Update — PHP2Shell attempts now carry Mirai malware and an ASLR bypass exists
Fix Patched in 8.5.12, 8.4.27, 8.3.36, 8.2.35
CriticalExploitation unknown
Next.js GHSA-673q-mjm6-r5xr: unauthenticated RCE in use cache functions
Fix Fixed version not stated in the advisory text
CriticalNot exploited
Pillow 13.0.0 fixes CVE-2026-112900, an EPS filename injection into Ghostscript, and a critical batch
Fix Patched in 13.0.0
CriticalNot exploited
x402 SDKs let a malicious API request an agent's full token balance
Fix Fixed in the Aug 18 releases
CriticalExploitation unknown
Pillow GHSA-8g5g-8vmr-9782: heap overflow in JPEG decoding reachable through Image.thumbnail()
Fix See the advisory; no CVE shown, so scanners may stay quiet
CriticalExploitation unknown
Mercury notebook-to-app server has two unauthenticated remote-code-execution flaws
Fix See the advisories for the fixed release
CriticalExploitation unknown
Claude Agent SDK (Python): resume argument injection runs arbitrary commands, CVE-2026-96620
Fix Patched in the latest claude-agent-sdk; the advisory gives no version number
HighExploitation unknown
Node.js Brotli decoder out-of-bounds write can allow RCE on every supported line
Fix Patched in 22.23.4, 24.22.1, 26.12.1
HighExploitation unknown
OpenCode runs a malicious MCP server's PowerShell during OAuth sign-in on Windows and WSL
Fix Patched in 1.18.33 (Sep 28); builds 1.0.137 to 1.18.32 are exposed
HighNot exploited
Eight eMudhra intermediate CA keys were guessable; Go, browsers and Cloudflare now block them
Fix Fixed: Go 1.27.3 / 1.26.10, browser blocks
HighExploitation unknown
MCP TypeScript SDK GHSA-jm63-cq47-j5jp and GHSA-46jr-4wx8-v453; A2A Java SDK fail-open authorization GHSA-qw47-mcm5-934w
Fix See advisories
HighExploitation unknown
OpenCode Console breach may have leaked saved provider keys
Fix Fix: none to install; affected users must revoke keys
Not exploited
PHP CVE-2026-115560: a third RCE path, with no emergency fix
Fix Not fixed in 8.5.12, 8.4.27, 8.3.36 or 8.2.35