CRITICAL/ OCTOBER 31, 2026TODAY’S BRIEFING — #225
WordPress, GitLab RCEs exploited; TeamViewer flaw reverses control
WordPress Core RCE flaw drew 63k attack attempts in 24 hours; GitLab maximum-severity vulnerability now exploited in the wild; TeamViewer flaw allows controlled machines to attack controllers.
CVE-2026-97229GitLab Community Edition And Enterprise Edition — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… · In CISA KEVCVE-2026-109618PHP Group PHP — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. · In CISA KEVCVE-2026-109619PHP Group PHP — PHP has various global state that temporarily points into request memory. · In CISA KEVCVE-2026-118527Ivanti Connect Secure — Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files… · In CISA KEV
Read the full briefing →