HIGH/ OCTOBER 30, 2026TODAY’S BRIEFING — #224
Linux kernel, PHP, Cisco, GitLab critical flaws under active exploitation
Linux kernel TCP flaw (CVSS 9.8) exploitable via AI-generated payloads; PHP RCE impacting 70% of websites under active attack; Cisco firewalls, GitLab servers targeted via CISA KEV additions with Nov 1 federal deadline.
CVE-2026-98432Linux Kernel — In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock()…CVE-2026-109618PHP Group PHP — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. · In CISA KEVCVE-2026-109619PHP Group PHP — PHP has various global state that temporarily points into request memory. · In CISA KEVCVE-2026-97229GitLab Community Edition And Enterprise Edition — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under… · In CISA KEV
Read the full briefing →