Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
2026-10-26T07:23:59Z•807ecfe88dbcbbfcd1c40a776f44e5a72d6df7ffe7fb611a2dbd513a138b91b1
CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-111497CVE-2026-112900CVE-2026-115560AI-securityUEFI-bootkitactive-exploitationcloud-and-network-edgecredential-theftmalwareprivacyransomwareremote-code-executionsecure-bootstate-sponsored-threatsupply-chain-compromisevulnerabilityzero-day
What happened
The document aggregates cybersecurity reports covering actively exploited vulnerabilities, critical remote code execution flaws, supply-chain compromises, credential theft, ransomware operations, state-sponsored attacks, bootkits, AI-agent security risks, and privacy incidents. Notable issues include Brotli decoder RCE (CVE-2026-111497), Pillow EPS command execution (CVE-2026-112900), PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), an additional PHP issue (CVE-2026-115560), actively exploited VeloCloud and Collabora Online flaws, compromised LiteLLM release infrastructure, and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 807ecfe88dbcbbfcd1c40a776f44e5a72d6df7ffe7fb611a2dbd513a138b91b1
- Enrichment time
- 2026-10-26T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.