CERT Polska published CVE-2026-103663 on 8 October 2026 for Ollama, the popular tool for running large language models locally. The /api/pull endpoint, used to download model layers, did not properly check layer digests in its digestToPath function, so an unauthenticated remote attacker can supply a digest containing a path traversal sequence and have a malicious file written outside the model store. If the server process can write to /usr/lib/ollama, which is the default in most Ollama Docker images, the planted file is loaded and executed on the next server restart, giving code execution as root. CERT Polska rates it CVSS 4.0 9.4 (the vector requires some user interaction, such as a pull being triggered). Ollama fixed it in version 0.35.0, released on 28 September 2026 (UTC). The bug was reported by Bartłomiej Dmitruk (striga.ai). No exploitation has been reported, but exposed Ollama servers are already being hunted by botnets such as PoeLLM. (source: CERT Polska)
CERT Polska — CVE-2026-103663 vulnerability in Ollama (8 Oct 2026)
LAVA published research on 8 October 2026 about CVE-2026-47483, a flaw it reported in NVIDIA's DCGM Exporter, the tool that publishes GPU telemetry over HTTP (typically at :9400/metrics) for systems such as Prometheus. LAVA says the exporter served Go's /debug/pprof profiling endpoints without authentication, and that with enough concurrent unauthenticated requests it could run out of memory and crash, cutting off visibility into GPU health and possibly slowing training or inference on the same host. NVIDIA's bulletin rates the flaw 8.2 (High, CWE-770), with denial of service and information disclosure as impacts. LAVA says it reproduced the behaviour with NVIDIA's official DCGM Exporter container without modifying it, and tested the resource exhaustion in a controlled environment, not against public deployments. Across four scans between March and May 2026, LAVA says it observed roughly 2,100 hosts publicly serving DCGM Exporter metrics without authentication, exposing more than 12,000 unique GPUs, including Blackwell Ultra B300, H200 and H100 parts as well as RTX 5090 and 4090 cards. LAVA says many sat on customer infrastructure associated with GPU cloud providers including Voltage Park, Lambda, Northern Data and DigitalOcean, whose security teams helped notify customers. NVIDIA's July 2026 bulletin lists DCGM 4.5.3 and DCGM Exporter 4.8.2 as the updated versions; LAVA says that in current versions the profiling endpoint is opt-in (--enable-pprof). Neither NVIDIA nor LAVA reports exploitation. (sources: NVIDIA bulletin; LAVA) Correction (31 Oct 2026): removed the SecurityWeek link and credit, which this desk cannot read, and an environment-variable name that neither linked source states; LAVA's post now opens at its /blog/ address, which the old /research/ link redirects to; the exposed-host figure now follows LAVA's own wording ('roughly 2,100'); the card date stays 8 October 2026, LAVA's date.
IBM published two security bulletins on 8 October 2026 for IBM Guardium Data Protection, the database activity monitoring platform whose collectors sit on the network and inspect database traffic. The Sniffer bulletin (versions 12.0, 12.1 and 12.2) fixes CVE-2026-75875 (CVSS 9.8, path traversal allowing remote code execution), CVE-2026-80381 (9.8) and CVE-2026-81932 (8.6, unauthenticated SQL injection), and several memory-corruption bugs in the traffic parsers, including a MongoDB SCRAM username overflow (CVE-2026-82335, 8.1) and a Microsoft SQL Server TDS PRELOGIN overflow (CVE-2026-84058, 8.1) that a remote attacker could trigger simply by sending crafted packets across a network the collector monitors. The Edge bulletin fixes CVE-2026-84272 (9.8): the edge-controller in 12.1 and 12.2.2 lacks authentication, so an unauthenticated remote attacker could run arbitrary container images and take control of managed edge clusters. The CVE records were published on 8 October; a related September bulletin also fixed CVE-2026-84249 (9.8, missing authentication for management operations in 12.2 and 12.2.2). IBM lists no workarounds and no exploitation. (source: IBM)
IBM — Security Bulletin: multiple vulnerabilities addressed in the Sniffer component of IBM Guardium Data Protection (8 Oct 2026)
A public proof-of-concept published on 8 October 2026 by V12 Security researcher Rick de Jager exploits “AnyPwn”, a pre-authentication heap overflow in AnyDesk for Linux. The handler for “mode-5” stream packets adds a fixed 16-byte header to an attacker-supplied payload length using 32-bit arithmetic with no overflow check, so a length near the 32-bit maximum wraps to a tiny allocation while the object keeps the original, much larger size; writing into it corrupts adjacent heap memory. The PoC uses that corruption via a ROP chain to call the process’s own system() function and run an arbitrary command as root, before a user approves any connection. Exploitation requires reaching the AnyDesk listening service (anydesk --service, which runs as root on Linux) over a direct TCP connection (default port 7070) rather than through AnyDesk’s relay infrastructure; the researchers triggered the vulnerable code path through relays using instrumentation but did not demonstrate a full exploit chain over relays. The PoC confirms exploitation against build 8.0.2. V12 announced the flaw on 22 June 2026; AnyDesk fixed it in Linux 8.0.3 on 23 June with a changelog line describing only a crash fix. The current Linux release is 8.1.0; Windows and macOS clients are not affected. Censys counts 175,838 hosts exposing AnyDesk directly on TCP 7070. As of 13 October 2026 it was not in CISA KEV and no in-the-wild exploitation had been reported. (source: Censys) Correction (22 Oct 2026): the headline said the flaw had no CVE. CVE-2026-109390 was published on 12 October 2026, assigned and scored (CVSS 3.1 9.8) by MITRE as the CNA, covering AnyDesk for Linux 8.0.0 to before 8.0.3; Censys says AnyDesk still had not published its own security advisory as of 13 October. (source: Censys advisory, 13 Oct 2026; CVE record CVE-2026-109390) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: Censys)
Censys — Oct 13 Advisory: AnyDesk Linux Pre-Authentication Root Code Execution (AnyPwn) [CVE-2026-109390]
Citrix Security Bulletin CTX697191 (published 8 October 2026) assigns CVE-2026-107406 to a memory-overflow flaw (CWE-119) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a SAML service provider or identity provider. CVSS v4.0 base 9.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L). Successful abuse can lead to remote code execution or denial of service. Exposure is version-specific: builds 14.1-73.37 through 14.1-73.41 and 13.1-64.23 through 13.1-64.28 (and matching FIPS/NDcPP ranges) are affected only as SAML IdP; older supported builds before those floors are affected as either SAML SP or IdP. Citrix urges upgrades to 14.1-73.46 or later, 13.1-64.29 or later, 14.1-73.46 FIPS or later, and 13.1-37.283 or later for 13.1-FIPS/NDcPP. Secure Private Access Hybrid deployments that use affected NetScaler instances also need the upgrade. Customer-managed appliances only; Citrix-managed cloud and Adaptive Authentication are updated by Citrix. Check config for add authentication samlAction (SP) or add authentication samlIdPProfile (IdP). Citrix said it was not aware of unmitigated exploits at publication. (sources: Citrix CTX697191; Cyber Security News)
GreyNoise reported on 8 October 2026 a rise in scanning and exploitation attempts against digital video recorders and cameras in Ukraine between 21 September and 1 October 2026. Almost all of it targeted CVE-2021-36260, the 2021 unauthenticated command injection in the web server of many Hikvision products (CVSS 9.8, NVD). Reconnaissance started on 21 September from a Ukrainian IP address; exploitation attempts jumped from near zero on 23 September and ran to 1 October. Four IP addresses sent nearly all of them: three PureVPN exit nodes (195.238.124.178, .181 and .188, AS56630) and one Ukrainian domestic address, which GreyNoise links to the VPN activity only with low confidence. Every request used the same command test from the public Nuclei template for this bug, with no payload, and the four addresses did not try it against GreyNoise sensors outside Ukraine; nothing more came from them through 7 October. GreyNoise records attempts, not confirmed takeovers, and does not link the activity to the missile and drone strikes it coincided with. Context: Ukraine said in January 2024 that Russian intelligence had used two hijacked cameras to watch Kyiv air defences. (sources: GreyNoise; Cyber Security News)
GreyNoise — Spike in attacks targeting digital video recorders in Ukraine (8 Oct 2026)
Strapi Cleartext Storage of Sensitive Information Vulnerability. Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
ONLYOFFICE Docs Server Path Traversal Vulnerability. ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
Apache Struts Command Injection Vulnerability. Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
ISC BIND Data Processing Errors Vulnerability. ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
ProFTPD Improper Access Control Vulnerability. ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
SEC Consult published a coordinated advisory on 8 October 2026 on five vulnerabilities it reported to TP-Link on 19 December 2024 in ISP-supplied mesh systems (HB, HX and HC series), routers (EB, EC and EX series), PON devices (XC and XX series) and VX-series xDSL modems. SEC Consult says TP-Link communicated 65 affected devices; the list includes Australian models HX510(AU) V1.0/2.0, HX220(AU) V1.0 and VX420-G2h(AU) V3.0. CVE-2025-30237 is an authentication bypass in the web server that lets an attacker with access to the web server act without credentials, for example creating a Superadmin user and enabling SSH; CVE-2025-30238 lets a low-privileged user perform administrator-only actions; CVE-2025-30241 is authenticated OS command injection running as root; CVE-2025-30239 is sensitive data protected with hardcoded keys tied only to the device model, so configurations and backups can be decrypted to reveal user, Wi-Fi and, depending on configuration, CWMP provider credentials; CVE-2025-30240 needs physical access to the USB port to read the whole file system. SEC Consult says the flaws together let an unauthenticated attacker on the same network fully compromise an affected device. Per SEC Consult's timeline, TP-Link supplied fixes for additional models and custom firmware for affected ISPs, published its own advisory (FAQ 5239) on 11 August 2026, and gave feedback on the ISP rollout state on 6 October. SEC Consult lists no workaround and does not report exploitation. (source: SEC Consult) Correction (1 Nov 2026): removed the SecurityWeek link and credit, which this desk cannot read; the state lawsuit details and wording about the fix timeline came only from SecurityWeek and have been removed. The card date stays 8 October 2026, SEC Consult's coordinated release date.
SEC Consult Vulnerability Lab — Multiple critical vulnerabilities in multiple TP-Link device series (coordinated release 8 Oct 2026)
