Patch Tuesday - October 2026
2026-10-14T07:23:38Z•144d7020c47fd199c4977504be4b60ef5799cdb327bf3bc5d771e4e45843bd61
CVE-2026-104935CVE-2026-21589CVE-2026-96951CVE-2026-97229AtlassianGitLabIvanti Connect SecureMicrosoft Patch TuesdayWindows Shellarbitrary-file-accessauthentication-bypassexploited-in-the-wildknown-exploited-vulnerabilitypatch-managementpublic-proof-of-conceptremote-code-executionzero-day
What happened
Rapid7 reports several high-impact October 2026 vulnerabilities, including exploited zero-days in Ivanti Connect Secure (CVE-2026-104935) and Windows Shell (CVE-2026-96951), a critical unauthenticated GitLab remote-code-execution flaw (CVE-2026-97229), and a critical unauthenticated arbitrary-file-access vulnerability affecting multiple Atlassian Data Center products (CVE-2026-21589). Public exploitation, CISA KEV listing, and public proof-of-concept material make urgent remediation and threat hunting advisable. The feed also includes Microsoft Patch Tuesday coverage, security incident and AI-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 144d7020c47fd199c4977504be4b60ef5799cdb327bf3bc5d771e4e45843bd61
- Enrichment time
- 2026-10-14T07:23:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.