Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

Blog · Daily digest · 2026-10-23

CVE-2026-65400 Apple Macos: exploited in the wild, how to patch

Most urgent: CVE-2026-65400: Apple macOS Improper Authentication Vulnerability
Critical severity (CVSS 9.8), exploited in the wild, remotely exploitable, no login needed. Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1.

On 23 October 2026, 493 new CVEs were published that we track: 36 critical, 7 already exploited in the wild (CISA KEV) and 44 with a fix or vendor patch available. Each one is ranked by severity, exploitation signals and how easy it is to reach, so you can patch the right ones first.

What happened on 23 October 2026: the most serious item is CVE-2026-65400 in macos (critical, CVSS 9.8, priority 92/100). Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1. 7 new CVEs from the list below are already being exploited (CVE-2026-65400, CVE-2026-18577, CVE-2026-18556, and more), so those go first. 6 of the 8 top items can be attacked remotely without a login. Most affected: gitroomhq (1). 44 of 493 new CVEs already have a fix or vendor patch; for the other 449, follow the downgrade or mitigation steps until one ships.

Patch these first

CVE-2026-65400: Apple macOS Improper Authentication Vulnerability

Critical severity (CVSS 9.8), priority 92/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); public exploit reference. Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1 for apple macos.

References: NVD · Release Notes, Vendor Advisory · Release Notes, Vendor Advisory

CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

High severity (CVSS 8.1), priority 86/100 (patch now). Signals: high severity; epss top 3%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to 2026.3 for n-able n-central.

References: NVD · Patch, Release Notes · Vendor Advisory

CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

High severity (CVSS 7.4), priority 83/100 (patch now). Signals: high severity; epss top 5%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to newer than 2026.1 for n-able n-central.

References: NVD · Vendor Advisory · Vendor Advisory

CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Critical severity (CVSS 9.2), priority 82/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); cisa ssvc: automatable with total technical impact. Recommended action: apply the vendor mitigation for Collabora Collabora Online – Built-in CODE Server.

References: NVD

CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability

High severity (CVSS 7.5), priority 80/100 (patch now). Signals: high severity; epss top 4%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.8 for jfrog artifactory.

References: NVD · Vendor Advisory

CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability

Critical severity (CVSS 9.9), priority 71/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev). Recommended action: upgrade to 5.2.3.18, 6.1.3.10, 6.4.2.12 for arista velocloud orchestrator.

References: NVD · Mitigation, Vendor Advisory

CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Medium severity (CVSS 5.3), priority 56/100 (patch now). Signals: exploited in the wild (cisa kev). Recommended action: upgrade to 7.146.35, 7.161.16 for jfrog artifactory.

References: NVD · Release Notes, Vendor Advisory · Vendor Advisory

CVE-2026-63244: An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow

Critical severity (CVSS 9.8), priority 50/100 (patch this month). Signals: critical severity; remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

Most affected vendors

How to act on this list

  1. Start with anything marked exploited or patch now.
  2. Check what you run: see how to check a version and patch it on Linux, Windows, pip and npm.
  3. Prefer the vendor or distro fix. If none exists, read when to downgrade and when to mitigate.
  4. Verify afterwards. Distros often fix a flaw without changing the upstream version, here is how to confirm.

FAQ

What is the most serious vulnerability published on 23 October 2026?

CVE-2026-65400 (Apple macOS Improper Authentication Vulnerability) ranks highest, with a priority score of 92/100. Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1.

Are any of the new CVEs exploited in the wild?

Yes, 7 of the new CVEs appear on the CISA Known Exploited Vulnerabilities list. Patch those first.

Should I downgrade if there is no fix yet?

Only when an older release is confirmed unaffected and the package is not a core system component. Downgrades can break dependent software, so test first and hold the package until a fix ships.

Sources

← All posts