34 live incidents (15 critical). Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.
Key takeaways
Multiple security incidents were reported, including a critical GitLab patch, Linux kernel vulnerabilities, and a compromised LiteLLM release.
- GitLab released a critical patch for a severe vulnerability affecting all CE/EE versions since 2014.
- Linux kernel vulnerabilities include remote code execution flaws in ksmbd, with no fixes yet available.
- LiteLLM's release pipeline was compromised, distributing malicious code that steals credentials.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
The private club for people who own their servers, run their own AI, and pay $0/month for software.
Ongoing security incidents, newest first: CVEs, what's affected, which versions fix it, and the advisories and posts behind each one.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.
