NewsCheck Point Research
12th October – Threat Intelligence Report
Linked advisories
- CVE-2026-76455Im Rahmen des fortgesetzten Engagements von Cisco für proaktive Sicherheit und Produktqualität hat das Cisco NX-OS-Engineering-Team eine umfassende interne Sicherheitsüberprüfung durchgeführt.
- CVE-2025-64393Critical Vulnerability in Veeam Backup & Replication
- CVE-2026-76455Cisco Nexus und Cisco NX-OS: Mehrere Schwachstellen
- CVE-2025-64393Veeam Backup and Replication: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2026-88779Citrix NetScaler ADC und Gateway: Schwachstelle ermöglicht Denial of Service
- CVE-2026-88779Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-76455Im Rahmen des fortgesetzten Engagements von Cisco für proaktive Sicherheit und Produktqualität hat das Cisco NX-OS-Engineering-Team eine umfassende interne Sicherheitsüberprüfung durchgeführt.
- CVE-2025-64393Diese Schwachstelle in Veeam Backup & Replication ermöglicht es einem Backup Viewer, beliebigen Code als SYSTEM auf dem Backup-Server auszuführen.
- CVE-2026-21589h3.
- CVE-2026-88779Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-88779Schwachstelle in NetScaler ADC und NetScaler Gateway.
- CVE-2026-21589Security Advisory 2026-015 — Critical Vulnerability in Multiple Atlassian Products
- CVE-2026-76455Cisco NX-OS Software Security Hardening Release: October 2026
- CVE-2026-21589Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-21589Atlassian Multiple Products — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2025-64393Veeam Backup Enterprise Manager: Mehrere Schwachstellen
- CVE-2026-21589Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von Informationen
- CVE-2026-21589Critical Vulnerability in Atlassian Data Center Products
Affected vendors and products
- Atlassian Atlassian Bamboo
- Atlassian Bamboo Data Center
- Atlassian Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
- Atlassian Bitbucket Server
- Atlassian Atlassian Confluence
- Atlassian Confluence Data Center
- Atlassian Atlassian Crowd
- Atlassian Crowd Data Center
- Atlassian Atlassian Crucible
- Atlassian Atlassian Fisheye
- Atlassian Atlassian Jira Data Center
More on October
Other advisories
- Not ratedosv:CLEANSTART-2026-HO16280HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023
- Not ratedosv:CLEANSTART-2025-OK79065Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nam...
- Not ratedosv:CLEANSTART-2026-QS58056HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023
- MediumCVE-2026-94290Rancher and Fleet October 2026 security release: any Rancher user could become cluster-admin on the management cluster (CVE-2026-94290)
- HighCVE-2026-20291Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
- HighCVE-2026-76490Cisco Expressway Series Security Hardening Release: October 2026
- CriticalCVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026
- CriticalCVE-2026-106071Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
Other news entries
- European supermarkets that failed to act after French freezer attack are now feeling the heatNewsCSO Online
- Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal AccessNewsThe Hacker News
- Cybersecurity M&A Roundup: 37 Deals Announced in October 2026NewsSecurityWeek
- DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud EnvironmentNewsThe Hacker News
- Microsoft fixes Smart App Control broken by October Windows updateNewsBleepingComputer
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)NewsRapid7
- Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated ScriptsNewsThe Hacker News
- Ivanti patches two more Connect Secure zero-days chained in attacksNewsBleepingComputer
Source: https://research.checkpoint.com/2026/12th-october-threat-intelligence-report/
ID