Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

Blog · Weekly roundup · 2026-10-24

CVE-2026-65400 Apple Macos: exploited in the wild, how to patch | Week 43: 536 new CVEs, 9 exploited

Most urgent: CVE-2026-65400: Apple macOS Improper Authentication Vulnerability
Critical severity (CVSS 9.8), exploited in the wild, remotely exploitable, no login needed. Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1.

Between 23 October 2026 and 24 October 2026 we tracked 536 new CVEs: 41 critical, 9 exploited in the wild and 9 that should be patched immediately. Here are the ten that matter most.

Top 10 this week

CVE-2026-65400: Apple macOS Improper Authentication Vulnerability

Critical severity (CVSS 9.8), priority 92/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); public exploit reference. Recommended action: upgrade to 14.8.9, 15.7.9, 26.6.1 for apple macos.

References: NVD · Release Notes, Vendor Advisory · Release Notes, Vendor Advisory

CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

High severity (CVSS 8.1), priority 86/100 (patch now). Signals: high severity; epss top 3%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to 2026.3 for n-able n-central.

References: NVD · Patch, Release Notes · Vendor Advisory

CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

High severity (CVSS 7.4), priority 83/100 (patch now). Signals: high severity; epss top 5%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to newer than 2026.1 for n-able n-central.

References: NVD · Vendor Advisory · Vendor Advisory

CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Critical severity (CVSS 9.2), priority 82/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); cisa ssvc: automatable with total technical impact. Recommended action: apply the vendor mitigation for Collabora Collabora Online – Built-in CODE Server.

References: NVD

CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability

High severity (CVSS 7.5), priority 80/100 (patch now). Signals: high severity; epss top 4%: very likely to be exploited; exploited in the wild (cisa kev). Recommended action: upgrade to 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.8 for jfrog artifactory.

References: NVD · Vendor Advisory

CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability

Critical severity (CVSS 9.9), priority 74/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); covered by 3 security sources. Recommended action: upgrade to 5.2.3.18, 6.1.3.10, 6.4.2.12 for arista velocloud orchestrator.

References: NVD · Mitigation, Vendor Advisory

CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Medium severity (CVSS 5.3), priority 56/100 (patch now). Signals: exploited in the wild (cisa kev). Recommended action: upgrade to 7.146.35, 7.161.16 for jfrog artifactory.

References: NVD · Release Notes, Vendor Advisory · Vendor Advisory

CVE-2026-63244: An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow

Critical severity (CVSS 9.8), priority 50/100 (patch this month). Signals: critical severity; remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-94075: Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Obje

Critical severity (CVSS 9.8), priority 39/100 (patch this month). Signals: critical severity; remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-114196: Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This

Critical severity (CVSS 9.8), priority 39/100 (patch this month). Signals: critical severity; remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

Most affected vendors

Daily digests

How to act on this list

  1. Start with anything marked exploited or patch now.
  2. Check what you run: see how to check a version and patch it on Linux, Windows, pip and npm.
  3. Prefer the vendor or distro fix. If none exists, read when to downgrade and when to mitigate.
  4. Verify afterwards. Distros often fix a flaw without changing the upstream version, here is how to confirm.

FAQ

How many new CVEs were there in week 43 of 2026?

We tracked 536 new CVEs between 23 October 2026 and 24 October 2026, 41 of them critical.

What should I patch first this week?

Start with CVE-2026-65400 (Apple macOS Improper Authentication Vulnerability): upgrade to 14.8.9, 15.7.9, 26.6.1.

Sources

← All posts