https://www.threatwire.tech/research/mindsdb-byom-unauthenticated-rce-is-cve-2026-7711ThreatWireen2026-10-22T08:08:00.000ZMindsDB BYOM unauthenticated RCE is CVE-2026-7711 https://www.threatwire.tech/threats/siemens-software-center-cve-2026-110936-exploited-clickfix-cisa-kevThreatWireen2026-10-22T07:01:00.000ZSiemens Software Center CVE-2026-110936: exploited in ClickFix attacks, in CISA KEV since Oct 20 https://www.threatwire.tech/news/php2shell-exploit-attempt-4-days-before-disclosure-amazon-madpotThreatWireen2026-10-22T06:40:00.000ZPHP2Shell was probed 4 days before disclosure: Amazon logged an attempt on Oct 17 https://www.threatwire.tech/news/gitlab-cvss-10-org-mode-rce-cve-2026-110264-fixed-oct-21ThreatWireen2026-10-22T06:20:00.000ZGitLab CVE-2026-110264: CVSS 10 unauthenticated RCE, fixed on October 21 https://www.threatwire.tech/news/signal-ringrtc-flaw-cve-2026-113380-can-keep-calls-live-after-hang-upThreatWireen2026-10-22T03:45:00.000ZSignal RingRTC flaw CVE-2026-113380 can keep calls live after hang-up https://www.threatwire.tech/news/oracle-ebs-workflow-cve-2026-101809-cvss-10-october-2026-cpuThreatWireen2026-10-21T09:55:00.000ZOracle EBS Workflow flaw CVE-2026-101809 scores CVSS 10.0: unauthenticated takeover fixed in October 2026 CPU https://www.threatwire.tech/threats/siteguard-server-edition-cve-2026-106931-exploited-in-cisa-kevThreatWireen2026-10-21T08:10:00.000ZSiteGuard Server Edition CVE-2026-106931: exploited flaw runs commands as root, now in CISA KEV https://www.threatwire.tech/news/php-critical-security-release-oct-21-two-cvss-9-2-flawsThreatWireen2026-10-20T23:55:00.000ZPHP2Shell: PHP fixes two critical RCE flaws, CVE-2026-109618 and CVE-2026-109619 https://www.threatwire.tech/news/fortisiem-cve-2026-106173-horizon3-public-poc-releasedThreatWireen2026-10-20T14:25:00.000ZFortiSIEM CVE-2026-106173: Horizon3 releases public PoC