SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization
Newly collected advisory
CVE-2026-116098
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
107 source records · 95 groupsSecurityYoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
Newly collected advisory
CVE-2026-116114
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityYoosee GM8135S Camera Secure Boot signature verification
Yoosee GM8135S Camera Secure Boot signature verification
Newly collected advisory
CVE-2026-116116
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityYoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
Newly collected advisory
CVE-2026-116115
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityZ.ai Zcode Sed Command Filter os command injection
Z.ai Zcode Sed Command Filter os command injection
Newly collected advisory
CVE-2026-116118
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitycontinuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
Newly collected advisory
CVE-2026-116109
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
Newly collected advisory
CVE-2026-116096
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitygougucms User Level Level.php add cross site scripting
gougucms User Level Level.php add cross site scripting
Newly collected advisory
CVE-2026-116100
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityhalo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
Newly collected advisory
CVE-2026-116117
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityitsourcecode Online Cake Ordering System deletetransac.php sql injection
itsourcecode Online Cake Ordering System deletetransac.php sql injection
Newly collected advisory
CVE-2026-116101
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityopenbq-org OpenBB Local API Server api_settings.py access control
openbq-org OpenBB Local API Server api_settings.py access control
Newly collected advisory
CVE-2026-116108
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitytar filter allows writing outside destination via empty-named symlink
tar filter allows writing outside destination via empty-named symlink
Affected-version evidence changed
CVE-2026-114583
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
ReleasesDefender
Microsoft Defender Antivirus · Security intelligence: 1.461.209.0
New version · Microsoft Defender Antivirus releases
SecurityAn issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component
An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component
Advisory content revised
CVE-2026-107079
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-banner (npm)
Malicious code in @ppa-web-components/ppa-banner (npm)
Advisory content revised
MAL-2026-18272
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-builder (npm)
Malicious code in @ppa-web-components/ppa-builder (npm)
Advisory content revised
MAL-2026-18273
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-headerfooter (npm)
Malicious code in @ppa-web-components/ppa-headerfooter (npm)
Advisory content revised
MAL-2026-18274
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-hotel-collection (npm)
Malicious code in @ppa-web-components/ppa-hotel-collection (npm)
Advisory content revised
MAL-2026-18275
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-navigation (npm)
Malicious code in @ppa-web-components/ppa-navigation (npm)
Advisory content revised
MAL-2026-18286
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-searchform (npm)
Malicious code in @ppa-web-components/ppa-searchform (npm)
Advisory content revised
MAL-2026-18287
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in react-native-bright-sdk (npm)
Malicious code in react-native-bright-sdk (npm)
Advisory content revised
MAL-2026-18290
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in web-pixels-manager (npm)
Malicious code in web-pixels-manager (npm)
Advisory content revised
MAL-2026-17895
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityPalo Alto Networks
CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)
Security news · Palo Alto Networks security advisories
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.