Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
2026-10-29T14:51:42Z•438978ef2de74b07d8b3ce37c7f030f52f90c9f3cfbb7900342a3475bf5aa2ab
CVE-2026-101767AI coding assistantsAPTDHSK-12 cybersecurityOracle E-Business SuiteSOHO and IoT compromiseSQL injectionTLS certificatesVolt Typhoonactive exploitationbrowser sandbox escapecredential theftdata breachenterprise applianceslocal file disclosureremote code executionvulnerability management
What happened
Help Net Security reports active exploitation of Oracle E-Business Suite CVE-2026-101767, an unauthenticated SQL injection in the Thin Client Framework that can lead to remote code execution, with a CVSS score of 9.8. The feed also covers browser sandbox escapes and local file access in AI coding assistants, Volt Typhoon’s relay infrastructure targeting enterprise control planes, a major DHS data leak, credential-driven attacks against K-12 districts, and broader vulnerability-management and certificate-security trends.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 438978ef2de74b07d8b3ce37c7f030f52f90c9f3cfbb7900342a3475bf5aa2ab
- Enrichment time
- 2026-10-29T14:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.