[teamviewer]

October 31, 2026

• A TeamViewer flaw turns the controlled host into the attacker. CVE-2026-111585 (CVSS 8.8) is an integer overflow in how the viewer allocates memory from the host-supplied screen size, overwriting past the buffer once a remote-control session starts — a clean path at a support technician's workstation. Remedio demonstrated mitigation bypass and code execution in the viewer on Windows, using a host-side stand-in to supply part of the data, so it is not yet a fully network-delivered attack. Fixed in 15.83; TeamViewer says it was unaware of attacks, Remedio released no exploit code, and it is not in KEV (The Hacker News). · Vulnerabilities & Exploits

in Open-Weight Model Turns Firefox's Patch Gap Into Working Exploits

October 30, 2026

Attackers Go for the Management Plane

Palo Alto Networks PHP2Shell flaws are under active exploitation against internet-exposed management interfaces, with CISA warning that attackers are chaining them with a Linux kernel privilege-escalation bug called Fragnesia. Cisco patched CVE-2026-76418, an unauthenticated remote DoS in Secure Firewall ASA/FTD being actively exploited, and Talos disclosed KeyDrift, a custom framework deployed on Catalyst SD-WAN Controllers targeting aerospace and defence sectors. ARTEX, a Chinese LLM-driven autonomous pentest framework, is now appearing at scale in intrusions—researchers report seeing more ARTEX servers than Cobalt Strike and all other C2 frameworks combined.