HIGH/ NOVEMBER 8, 2026TODAY’S BRIEFING — #233
Claude Code credential leak, WordPress patch window flaw, SonicWall VPN bypass actively exploited
Claude Code exposed 1,122 repos with developer secrets; WordPress patch installation remains vulnerable during update; SonicWall SSLVPN bypass actively exploited with federal remediation deadline.
CVE-2026-19868SonicWall SonicOS SSLVPN — An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to… · In CISA KEVCVE-2026-123158OpenSSH — sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…CVE-2026-83844Microsoft Paint — Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.CVE-2026-109618PHP Group PHP — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. · In CISA KEV
Read the full briefing →