InfoSecBulletin Cybersecurity for mankind
Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain higher access, while the other two can expose information due to weak certificate checks. Updating to Zoom Workplace 7.2.0 or newer fixes most of these issues.
| CVE | CVSS (CVSSv3) | Type | Fixed in | Status |
|---|---|---|---|---|
| CVE-2026-53418 | 8.1 | CWE-939 | 7.2.1 | Not exploited |
| CVE-2026-53420 | 8 | CWE-120 | 7.2.0 | Not exploited |
| CVE-2026-108184 | 7.4 | CWE-295 | — | Not exploited |
| CVE-2026-108185 | 7.4 | CWE-295 | — | Not exploited |
NVIDIA
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
Critical Atlassian & IBM Flaws Expose Files and Enable Remote Code Execution
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
NVIDIA put out six security updates on October 13, 2026, to fix 18 problems in its AI software. Eight are issues in NVIDIA AIStore, one of which is CVE-2026-65162, a serious CVSS 10.0 bug that can allow remote code execution. All eight AIStore flaws carry a “no privileges required” rating.
Notable CVEs
| CVE | CVSS (CVSSv3) | Type | Status |
|---|---|---|---|
| CVE-2026-65162 | 10 | CWE-250 | Not exploited |
| CVE-2026-65173 | 9.1 | CWE-306 | Not exploited |
| CVE-2026-65172 | 8.6 | CWE-862 | Not exploited |
| CVE-2026-65170 | 8.6 | CWE-918 | Not exploited |
| CVE-2026-65101 | 8.6 | CWE-918 | Not exploited |
| CVE-2026-65164 | 8.1 | CWE-22 | Not exploited |
| CVE-2026-65103 | 8.1 | CWE-22 | Not exploited |
| CVE-2026-65180 | 7.8 | CWE-502 | Not exploited |
Affected Versions:
AIStore: all versions through 4.9 on Linux
Megatron-LM: versions before 0.17.1
DALI: versions through 2.2
Isaac Lab: versions through 2.3.2
NVSentinel: version 1.19.0
Warp: versions 1.13.0, 1.14.0 and 1.15.0
Patch and Mitigation Steps:
Upgrade AIStore to version 5.0.
Update Megatron-LM to 0.17.1 or later.
Move DALI to 2.3, Isaac Lab to 3.0-beta2, NVSentinel to 1.20.0 and Warp to 1.16.0.
Keep AIStore proxies and targets off public networks, and restrict access to its APIs.
Only load model checkpoints from trusted sources.
IBM
IBM released two security notices about four flaws in IBM WebSphere Liberty. Two serious issues, CVE-2026-93895 and CVE-2026-93909, have a CVSS base score of 9.1 and let people bypass authentication or access controls. Admins should quickly use the interim fixes for APAR DT502929 and APAR DT502359.
| CVE | CVSS (CVSSv3) | Type | Status |
|---|---|---|---|
| CVE-2026-93895 | 9.1 | CWE-284 | Not exploited |
| CVE-2026-93909 | 9.1 | CWE-384 | Not exploited |
| CVE-2026-95695 | 7.4 | CWE-863 | Not exploited |
| CVE-2026-95696 | 6.5 | CWE-400 | Not exploited |
Patch and Mitigation Steps:
In both notices, “IBM strongly recommends addressing the vulnerability now by applying a currently available interim fix or fix pack.” Administrators using the grpc-1.0 feature on versions 20.0.0.12 through 26.0.0.10 must apply the interim fix for APAR DT502929. Similarly, teams running samlWeb-2.0 on versions 17.0.0.3 through 26.0.0.10 should install the interim fix for APAR DT502359. Alternatively, organizations can upgrade to IBM WebSphere Liberty Fix Pack 26.0.0.11 or later, targeted for fourth-quarter 2026 availability.
