Daily brief, Wednesday, October 14, 2026

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

• 9.8CVE-2026-76519 Cisco Secure Email GatewayCISA KEVCisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
• 8.6CVE-2026-0322 Palo Alto Networks PAN-OSCISA KEVAn attacker gains remote code execution and injects malicious code into Palo Alto Networks PAN-OS firewalls.
• 10.0CVE-2026-105134 Ahsay AhsayCBSCISA KEVDetectionCVE published Oct 4, 2026An attacker can execute arbitrary OS commands on AhsayCBS.

1 older CVE (published more than 7 days earlier) added to KEV, below the bar (CVSS under 9, not widely used enterprise tech): CVE-2026-105133 (7.3).

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

• 9.8CVE-2026-76519 Cisco Secure Email GatewayKEVexploit codeCisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
• 9.8CVE-2026-110447 Collabora Collabora Online - Built-in CODE ServerKEVexploit codeDetectionAn attacker can execute remote code.
• 9.8CVE-2020-37282 Vworld4u office-converterAn attacker can execute arbitrary OS commands on Vworld4u's office-converter.
• 9.8CVE-2026-110640 Ariym whisper-nodeAn attacker can execute arbitrary OS commands on Ariym's whisper-node.
• 9.8CVE-2026-110635 Scionoftech webp-converterAn attacker can execute arbitrary OS commands on Scionoftech's webp-converter.
• 9.3CVE-2026-92152 Nasa fprimeAn attacker gets deserialization of malicious data by exploiting a vulnerability in fprime.
• 10.0CVE-2026-55572 E107inc e107An attacker can inject malicious SQL and access e107 data.

Ransomware

No leak-site posts collected.

New data breaches

• Crunchbase crunchbase.com559,908 accounts