CVE-2026-118769 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
AL-TOUCH / SECURITY BRIEF
Security brief | 2026-10-30
Brand updates, public security notices and practical business actions, collected weekly.
This edition: major vulnerabilities and fixes
Critical · source ratingCVE-2026-118769 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-118762 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingWWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket PluginVersions and remediation
GitHub Advisory Database · Source updated
Affected / fixed versions
- composer / WWBN/AVideoAffected < 29.1.0Fixed version 29.1.0
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
Match these source records to your assets; publication does not mean your systems are affected.
Compiled / adapted by AL-Touch · CC-BY-4.0
Critical · source ratingBrotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packageVersions and remediation
GitHub Advisory Database · Source updated
Affected / fixed versions
- pip / brotliAffected >= 1.0.3, < 1.2.1Fixed version 1.2.1
- pip / brotlicffiAffected >= 1.0.3, < 1.2.1.0Fixed version 1.2.1.0
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
Match these source records to your assets; publication does not mean your systems are affected.
Compiled / adapted by AL-Touch · CC-BY-4.0
Known exploited · CISA KEVCVE-2026-97229 | GitLab Community Edition and Enterprise EditionVersions and remediation
CISA KEV · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Prioritise exposed assets. Apply vendor fixes or mitigations; restrict access or discontinue the affected product if no mitigation is available. CISA federal-agency directives are not Hong Kong statutory deadlines.
Match these source records to your assets; publication does not mean your systems are affected.
Compiled / adapted by AL-Touch · CC0-1.0
Known exploited · CISA KEVCVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareVersions and remediation
CISA KEV · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Prioritise exposed assets. Apply vendor fixes or mitigations; restrict access or discontinue the affected product if no mitigation is available. CISA federal-agency directives are not Hong Kong statutory deadlines.
Match these source records to your assets; publication does not mean your systems are affected.
Compiled / adapted by AL-Touch · CC0-1.0
Critical · source ratingCVE-2026-90863 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-90864 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-90865 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-90866 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-90868 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Critical · source ratingCVE-2026-93680 | NVD vulnerability recordVersions and remediation
NIST NVD · Source updated
Affected / fixed versions
Affected versions were not specified by the source. Check the vendor advisory before acting.
Remediation
Check the vendor advisory and your actual deployment. Apply the supported security update and verify the running version after restart. If no fix is available, follow vendor mitigations and restrict exposure.
NVD product/version matches are candidates. Check the original configuration conditions (AND/OR, platform and deployment); a range endpoint is not a confirmed patched version.
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
ISSUE 2026.10.30
A selection from approved public-source feeds over the previous seven days, with original links, dates and practical follow-up.
Read this edition ↓AL-TOUCH / WEEKLY EDITION
This edition: news and business action
Automatically selected records are compiled from their original sources, without independent confirmation of each item. Check vendor advice against your actual products, versions and deployment.
CVE-2026-118762 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin
GitHub Advisory Database lists GHSA-8whc-2wmv-ww35 for package WWBN/AVideo, with affected range < 29.1.0.
Business impact and suggested action
Compiled / adapted by AL-Touch · CC-BY-4.0
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
GitHub Advisory Database lists GHSA-9v8h-qqgm-4m35 for package brotli, with affected range >= 1.0.3, < 1.2.1.
Business impact and suggested action
Compiled / adapted by AL-Touch · CC-BY-4.0
CVE-2026-97229 | GitLab Community Edition and Enterprise Edition
CISA added CVE-2026-97229 to its known exploited vulnerabilities catalogue on 2026-10-29. The affected product is GitLab Community Edition and Enterprise Edition.
Business impact and suggested action
Compiled / adapted by AL-Touch · CC0-1.0
CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
CISA added CVE-2026-76418 to its known exploited vulnerabilities catalogue on 2026-10-29. The affected product is Cisco Secure Firewall ASA Software and Cisco Secure FTD Software.
Business impact and suggested action
Compiled / adapted by AL-Touch · CC0-1.0
CVE-2026-90863 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
CVE-2026-90864 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
CVE-2026-90865 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
CVE-2026-90866 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
CVE-2026-90868 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
CVE-2026-93680 | NVD vulnerability record
NVD published this record on 2026-10-29 and last updated it on 2026-10-29.
Business impact and suggested action
Compiled / adapted by AL-Touch · NIST non-SRD data public-service reuse grant
Sources, licences and permitted use
GovCERT.HK ↗ · Reference link / review required
HKCERT ↗ · Approved automatic source · CC-BY-3.0-HK
PCPD ↗ · Reference link / review required
Hong Kong Monetary Authority ↗ · Reference link / review required
Securities and Futures Commission ↗ · Reference link / review required
Hong Kong Police CyberDefender ↗ · Reference link / review required
CISA KEV ↗ · Approved automatic source · CC0-1.0
UK NCSC ↗ · Approved automatic source · Open Government Licence v3.0
Australian Cyber Security Centre ↗ · Reference link / review required
Singapore CSA / SingCERT ↗ · Reference link / review required
JPCERT/CC ↗ · Reference link / review required
CERT-EU ↗ · Reference link / review required
ANSSI / CERT-FR ↗ · Approved automatic source · Licence Ouverte / Open Licence v2.0
Canadian Centre for Cyber Security ↗ · Reference link / review required
New Zealand NCSC ↗ · Reference link / review required
CNCERT/CC ↗ · Reference link / review required
CERT-In ↗ · Reference link / review required
FBI / IC3 ↗ · Reference link / review required
NIST NVD ↗ · Approved automatic source · NIST non-SRD data public-service reuse grant
CVE Program ↗ · Reference link / review required
FIRST EPSS ↗ · Reference link / review required
CERT/CC ↗ · Reference link / review required
OWASP Foundation ↗ · Reference link / review required
GitHub Advisory Database ↗ · Approved automatic source · CC-BY-4.0
Microsoft MSRC ↗ · Reference link / review required
Google Cloud Security Bulletins ↗ · Approved automatic source · CC-BY-4.0
Apple Security Releases ↗ · Reference link / review required
Cisco PSIRT ↗ · Reference link / review required
Fortinet FortiGuard PSIRT ↗ · Reference link / review required
Palo Alto Networks PSIRT ↗ · Reference link / review required
Mozilla Security Advisories ↗ · Reference link / review required
Ivanti Security Advisory ↗ · Reference link / review required
Broadcom / VMware Security Advisories ↗ · Reference link / review required
Dell Security Advisories ↗ · Reference link / review required
HPE Security Bulletins ↗ · Reference link / review required
Lenovo Product Security ↗ · Reference link / review required
Oracle Security Alerts ↗ · Reference link / review required
Synology Security Advisories ↗ · Reference link / review required
Veeam Knowledge Base ↗ · Reference link / review required
WebRAY ↗ · Reference link / review required
Huorong Security ↗ · Reference link / review required
ToDesk ↗ · Reference link / review required
Adobe PSIRT ↗ · Reference link / review required
GlobalSign ↗ · Reference link / review required
xFusion PSIRT ↗ · Reference link / review required
Zenarmor Release Notes ↗ · Reference link / review required
The Hacker News ↗ · Reference link / review required
BleepingComputer ↗ · Reference link / review required
SecurityWeek ↗ · Reference link / review required
Hacker News community ↗ · Reference link / review required
Compiled by AL-Touch · each item links to its original source. This is the website edition; email delivery is arranged separately.