Daily brief, Thursday, October 15, 2026

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

1 older CVE (published more than 7 days earlier) added to KEV, below the bar (CVSS under 9, not widely used enterprise tech): CVE-2026-21589 (7.5).

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

• 9.9CVE-2026-110812 AWS Amazon Neptune EngineAn attacker gets arbitrary code execution in Amazon Neptune Engine with authentication.
• 9.6CVE-2026-110916 Google ChromeA remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page in Google Chrome.
• 9.3CVE-2026-99999 Linux LinuxA denial of service vulnerability exists in the Linux kernel due to an ipv4 checksum issue.
• 9.8CVE-2026-98432 Linux LinuxAn attacker can execute code with elevated privileges on Linux.
• 9.1CVE-2026-55240 Msgbyte tianjiAn attacker with a workspace admin account can inject malicious code into the Tianji platform.
• 9.2CVE-2026-16436 Mitsubishi Electric GENESISAn attacker can bypass authentication and access the Mitsubishi Electric GENESIS system.
• 9.4CVE-2026-16438 Mitsubishi Electric GENESIS64An attacker can escalate privileges in GENESIS64.

Ransomware

No leak-site posts collected.

New data breaches

No new breaches published.