NewsCisco Talos
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Teaser from the source
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Cisco TalosLinked advisories
- CVE-2026-104935October 2026 Security Update
- CVE-2026-104935Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CVE-2014-125110wp-file-upload Plugin: Cross-Site-Scripting (XSS)
- CVE-2015-1000013Csv2wpec-coupon: Sicherheitslücke
- CVE-2026-104935Active Exploitation of Vulnerability in Ivanti Connect Secure
- CVE-2026-104935Ivanti Connect Secure: Schwachstelle ermöglicht die Umgehung von Authentifizierung und Codeausführung
- CVE-2026-104935Ivanti Connect Secure — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- CVE-2014-125110wp-file-upload Plugin: Cross-Site-Scripting (XSS)
- CVE-2015-1000013Csv2wpec-coupon: Sicherheitslücke
- CVE-2026-104935Eine Schwachstelle zur Umgehung der Authentifizierung durch Spoofing in ICS vor Version 25.
Affected vendors and products
More on Pulse
Other advisories
- MediumCVE-2026-98657iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
- Not ratedosv:CVE-2026-98657iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
- MediumCVE-2026-108599Pulseaiclub Phi: Folgen symbolischer Links (Link Following)
- MediumCVE-2026-108595Pulseaiclub Phi: fehlerhafte Autorisierung
- MediumCVE-2026-108599Pulseaiclub Phi: Folgen symbolischer Links (Link Following)
- MediumCVE-2026-108595Pulseaiclub Phi: fehlerhafte Autorisierung
- Highosv:MAL-2026-17335Malicious code in @firelordzuka/pulse-poc (npm)
- Highosv:MAL-2026-16254Malicious code in pulse-pwn-9f3a2 (npm)
Other news entries
- building intent-based access control without reading mindsNewsSophos X-Ops
- Russian state hackers use new RedFlick technique to push malwareNewsBleepingComputer
- Russia's Star Blizzard Ditches ClickFix to Widen Phishing NetNewsDark Reading
- Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent AttacksNewsSecurityWeek
- ai research messageboardsNewsSophos X-Ops
- New InfraTrust report reveals infrastructure flaws admins should patch firstNewsBleepingComputer
- Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be PatchedNewsThe Hacker News
- Nintendo confirms data stolen in WebMD subsidiary cyberattackNewsBleepingComputer
Source: https://blog.talosintelligence.com/the-q3-vulnerability-pulse-discovery-exploitation/
ID