Daily brief, Monday, October 19, 2026

Breaking

Nothing spreading fast in technology large companies run.

Newly exploited in the wild

No CVEs added to CISA's known-exploited list.

New public exploit code

No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.

New critical CVEs

• 9.2CVE-2026-112393 Python-Pillow PillowAn attacker can create a denial of service condition and potentially disclose sensitive information on Python-Pillow.
• 9.8CVE-2026-112900 Python-Pillow PillowAn attacker can inject commands when invoking Ghostscript in Pillow.
• 9.8CVE-2026-112403 Python-Pillow PillowAn attacker can cause memory corruption when decoding JPEG images in Pillow.
• 9.9CVE-2026-112370 H3C Magic NX15An attacker gets remote code execution in H3C Magic NX15.
• 9.8CVE-2026-111058 Mljar mercuryAn attacker can bypass authentication and create Jupyter kernels in Mercury.
• 9.8CVE-2026-107083 An attacker gains data access to SLiMS via SQL injection with user interaction.
• 10.0CVE-2026-111057 Mljar mercuryAn attacker can bypass the anonymous endpoint block on mercury via requests to /api/terminals.
• 9.8CVE-2026-112296 Sunkaifei FlyCmsAn attacker can gain super administrator access in FlyCms with default credentials.
• 9.6CVE-2026-107188 Eptura ArchibusA user can upload and browse JSP code in Eptura Archibus.
• 9.8CVE-2026-112776 Craftcms cmsAn attacker can bypass authorization and mutate content in Craft CMS.
• 9.1CVE-2026-110685 An attacker can cause a Perl application using Cpanel::JSON::XS to leak decoded arguments of a tagged value, leading to a denial of service.

Ransomware

8 victims posted to leak sites. Most active: qilin (2), N0n (2), Global Secret Group (2), lockbit5 (1), Redact (1).

New data breaches

No new breaches published.