# What attackers are exploiting. Platform breaches Grayhaven is following, each from the company's own report, and every flaw CISA confirmed exploited in the last 30 days. Rebuilt hourly; last changed 2026-11-04. Also as [JSON](https://www.grayhavenindustries.com/watch/data.json) and [RSS](https://www.grayhavenindustries.com/watch/feed.xml), which takes ?only=incidents, ?only=flaws, ?only=ransomware or ?vendor=name,name, and as an MCP server at https://www.grayhavenindustries.com/watch/mcp (no key). Not security advice: check the vendor's advisory before acting. ## Platform incidents ### Luanti says attacker broke into ContentDB servers Began 2026-10-22. Open. Luanti: ContentDB servers, including usernames, emails, hashed passwords, IP addresses of downloaders and uploaded packages. Luanti said an attacker broke into ContentDB by exploiting two vulnerabilities, one of them in a third-party component that it reported to the maintainer. Luanti said the attacker had access to ContentDB's internal configuration from 22nd October 13:00 UTC and used it to sign into a staff account. Luanti said it confirmed that from 26th October 00:15 the attacker could run commands on its server inside a docker container, with full access to the database. Luanti said the attacker had full access to secrets, the database, redis and uploads, including usernames, emails, bcrypt hashed passwords, and download IP addresses from the two weeks before 26th October. Luanti said it checked every upload against backups and found no changes, but it has not ruled out that the attacker caused ContentDB to serve malicious uploads. Written automatically from Luanti's own report and checked against it, sentence by sentence. Sources: [Luanti Blog, URGENT: ContentDB security incident: 22โ€“26 October 2026, 2026-10-27](https://blog.luanti.org/2026/10/27/contentdb-security-incident/). Updated 2026-10-27. ### FirstVDS says attackers copied client server data via VMmanager Began 2026-10-17. Open. FirstVDS, a VDS hosting provider: data on client virtual servers hosted on 457 virtualization nodes where collector archives were found. FirstVDS said that on 17 October 2026 it found a compromise of the VMmanager 6 virtualization management platform, made by ISPsystem, and that the attacker gained administrative access to the panel. FirstVDS said the attacker used the panel's standard functions to run a data collector on virtualization nodes, and that it mounted client virtual machine disks in read only mode and copied selected files, including passwords, keys, tokens and configurations. FirstVDS said collector archives were found on 457 virtualization nodes, and that this is a count of physical servers, not of clients or virtual machines. FirstVDS said the archives are encrypted with the attacker's key, that it does not have the key, and that it cannot check from the archives which exact files were copied from each virtual machine. FirstVDS said it began sending personal notices to affected clients on 18 October, and that clients who received one should treat the data on the listed servers as compromised. Written automatically from FirstVDS's own report and checked against it, sentence by sentence. Sources: [FirstVDS, Postmortem: attack on FirstVDS 17.10.2026, 2026-10-27](https://firstvds.ru/blog/postmortem-ataka-na-firstvds-17102026), [FirstVDS, VMmanager vulnerability: change your credentials urgently, 2026-10-18 with updates](https://firstvds.ru/blog/uyazvimost-vmmanager-srochno-smenite-dostupy). Updated 2026-10-27. ### OVHcloud CLI releases replaced with secret stealing binaries Began 2026-10-19. Open. OVHcloud, a cloud and hosting provider: ovhcloud-cli release binaries v0.11.0 to v0.15.0, downloaded on 19 October 2026 between 14h47 and 16h21 (UTC+2). OVHcloud said a compromised OVHcloud GitHub developer account was used to replace several existing release assets of ovhcloud-cli with malicious binaries on 19 October 2026 between 14h47 (UTC+2) and 16h21 (UTC+2). OVHcloud said the affected releases were v0.11.0 to v0.15.0, and that only users who installed the CLI in that window were affected. OVHcloud said the source code and build chain were not affected and no other repository projects were affected. OVHcloud said the malicious binaries were designed to steal secrets and files, including cloud credentials, SSH keys, Kubernetes and Docker configuration, and AI coding tool data. OVHcloud said the main cause was that the GitHub repository was not configured for release immutability, and that this was corrected and applied to every repository. Written automatically from OVHcloud's own report and checked against it, sentence by sentence. Sources: [OVHcloud, ovhcloud-cli security incident advisory (GitHub), 2026-10-20](https://github.com/ovh/ovhcloud-cli/security/advisories/GHSA-862f-55f5-vmvw), [OVHcloud Community, ALERT Ovhcloud-CLI hacked here, 2026-10-20](https://community.ovhcloud.com/t/alerte-ovhcloud-cli-pirate-hier/54162). Updated 2026-10-23. ### Railway customers told to rotate every stored secret Began 2026-10-21. Open. Railway, a hosting platform: environment variables stored for customers. Railway said an unauthorized third party may have reached the encrypted environment variables it keeps for customers and decrypted some of them. It asked every customer to rotate every variable, API key and registry credential stored with it. Railway invalidated all Railway API tokens, reset storage bucket credentials and the GitHub tokens it held, and published guides for checking unexpected use of AI service keys. It believes the breach is part of a series aimed at AI service providers. It had not published a cause as of 22 October. Sources: [Railway, security disclosure, 21 October 2026](https://blog.railway.com/p/security-disclosure-wednesday-october-21st), [Railway, incident QH8L8B3E status log](https://status.railway.com/incident/QH8L8B3E), [Railway, redeploy buckets and reconnect GitHub, 22 October 2026](https://blog.railway.com/p/security-disclosure-recommendation-redeploy-buckets-and-reconnect-github-after-the-credential-reset). Updated 2026-10-22. ### LiteLLM release v1.107.0 pushed with credential stealing malware Began 2026-10-21. Open. LiteLLM: release pipeline, PyPI package and Docker images for v1.107.0, plus credentials of users who installed or ran them. LiteLLM said its release pipeline was compromised in the early morning of October 21 and pushed v1.107.0 to the docker registry and PyPi. LiteLLM said v1.107.0 contained compiled malware which steals credentials and loads remote-code execution tools. LiteLLM said the malicious PyPI package was live from 11:39 UTC to 13:23 UTC, and the compromised Docker images were live from 11:46 UTC to 14:20 UTC. LiteLLM said all previous versions are safe, the impacted releases have been pulled, and enterprise customers on the private enterprise release were not impacted. LiteLLM said it believes it has identified the attack chain, and that it has not yet confirmed how the attacker gained access to its internal deployment but currently suspects a recently patched vulnerability. LiteLLM said the incident was contained and the investigation was still in progress as of its October 21, 2026 20:30 UTC update. Written automatically from LiteLLM's own report and checked against it, sentence by sentence. Sources: [LiteLLM, Contained: Oct 21, 2026 LiteLLM release v1.107.0 Compromised, 2026-10-21](https://docs.litellm.ai/blog/security-incident-oct-21-2026). Updated 2026-10-22. ### GMO Internet reports third-party intrusion into Onamae.com Desktop Cloud servers Began 2026-10-20. Open. GMO Internet, Onamae.com Desktop Cloud: 26,739 customer servers potentially affected, with stored data including trading account logins possibly viewed. GMO Internet said 26,739 servers were potentially affected and that information stored on the servers may have been viewed. GMO Internet said it began shutting down customer servers in sequence from 4:00 on October 21, 2026, and had not yet set a date for resumption. In its second report, GMO Internet said it had received customer reports of unauthorized operations on trading accounts linked to trading tools used on the servers. GMO Internet said trading tool passwords and trading account credentials used on the servers may have been viewed by a third party, and that it was investigating with an external cybersecurity firm and had consulted the police on October 22. Written automatically from GMO Internet's own report and checked against it, sentence by sentence. Sources: [GMO Internet, Apology and Notice Regarding Unauthorized Access by a Third Party to Onamae.com Desktop Cloud, 2026-10-21](https://internet.gmo/en/news/article/246/), [GMO Internet, Notice and Apology Regarding Unauthorized Access to Onamae.com Desktop Cloud (Second Report), 2026-10-22](https://internet.gmo/en/news/article/247/). Updated 2026-10-22. ### OpenCode console keys may have been exposed Began 2026-10-16. Open. OpenCode Console, the hosted service: AI provider keys saved by 1.4% of its users. OpenCode said a breach it called related to a large-scale distillation attack affected 1.4% of its console users, those who had linked outside AI providers, and that it emailed each of them. The Hacker News reports that the keys saved in the hosted console may have been exposed, and that OpenCode's co-founder said keys used by its local apps never reach OpenCode. OpenCode said it was working with Anthropic, OpenAI and Google, and had not said any key was copied or used. Sources: [OpenCode on X, 17 October 2026](https://x.com/opencode/status/2111519637049319818), [The Hacker News, OpenCode Console breach, 19 October 2026](https://thehackernews.com/2026/10/opencode-console-breach-may-have.html). Updated 2026-10-22. ### Zeabur platform database read by an attacker Began 2026-10-14. Open. Zeabur, a hosting platform: 3,218,965 environment variable records and 321,810 accounts. Zeabur reported that on 14 and 15 October an attacker used leaked internal credentials to work through its systems and read 3,218,965 environment variable records and 321,810 accounts from its platform database. Zeabur gives the cause: long-lived admin credentials stored in plaintext that could be used from the public internet, unchanged since January 2024. More than 16 hours of attack activity raised no alert. Zeabur judges from the attacker's commands that it was mainly after API keys, especially for AI services. Sources: [Zeabur, October 2026 security incident, 19 October 2026](https://zeabur.com/blogs/october-2026-security-incident). Updated 2026-10-22. ### PingCAP says stolen credentials let an attacker copy data and source code Began 2026-09-09. Open. PingCAP, maker of TiDB Cloud: internal systems, exported customer account and billing records, and source code. PingCAP said that between September 9 and October 7, 2026, an unauthorized party used stolen service account credentials to access certain internal systems, copy data, and obtain source code. PingCAP said exported records included user names, email addresses, organization and project associations, SQL editor text and errors, customer contacts, contract terms, orders, pricing, and billing configuration. PingCAP said an exported table contained encrypted TiDB Cloud API-key values, and that whether other usable credentials were exposed remains to be determined. PingCAP said there is no evidence that data stored in TiDB was impacted, and that an external firm found no evidence the attacker ran commands or kept persistent access in the production systems it reviewed. PingCAP said it became aware of the incident on October 7, and that as of October 14 all identified compromised credentials were invalidated and the identified unauthorized access paths were blocked. PingCAP said it is still determining which customers and data types were affected, and that it will notify affected customers directly once customer-specific impact is established. Written automatically from PingCAP's own report and checked against it, sentence by sentence. Sources: [PingCAP, Security Incident Report: Unauthorized Access to PingCAP Cloud Resources, October 19, 2026](https://www.pingcap.com/trust-hub/security/security-update-october-2026/). Updated 2026-10-22. ### Vercel breach that began at an employee's AI tool Began 2026-04-19. Closed 2026-10-16. Vercel: non-sensitive environment variables of a limited set of customers. Vercel said its April breach began with Context.ai, a third-party AI tool one employee used, whose Google Workspace connection was compromised. The attacker took over the employee's accounts, moved into a Vercel environment and decrypted non-sensitive environment variables for a limited set of customers. Vercel closed the incident on 16 October 2026. Sources: [Vercel, April 2026 security incident](https://vercel.com/kb/bulletin/vercel-april-2026-security-incident). Updated 2026-10-22. ## Newly exploited flaws Added to [CISA's Known Exploited Vulnerabilities catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) in the 30 days to 2026-11-04, newest first. | Added | Product | Flaw | Fix by | CVE | |---|---|---|---|---| | 2026-11-04 | Apple Multiple Products | Improper Authentication | 2026-11-18 | [CVE-2024-27834](https://www.grayhavenindustries.com/watch/CVE-2024-27834) | | 2026-11-03 | WordPress Core | Time-of-check Time-of-use (TOCTOU) Race Condition | 2026-11-06 | [CVE-2026-119977](https://www.grayhavenindustries.com/watch/CVE-2026-119977) | | 2026-10-30 | Ivanti Connect Secure | Generation of Predictable Numbers or Identifiers | 2026-11-13 | [CVE-2026-118527](https://www.grayhavenindustries.com/watch/CVE-2026-118527) | | 2026-10-30 | Ivanti Connect Secure | Missing Authentication for Critical Function | 2026-11-02 | [CVE-2026-111357](https://www.grayhavenindustries.com/watch/CVE-2026-111357) | | 2026-10-29 | GitLab Community Edition and Enterprise Edition | Integer Overflow or Wraparound | 2026-11-01 | [CVE-2026-97229](https://www.grayhavenindustries.com/watch/CVE-2026-97229) | | 2026-10-29 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Unchecked Return Value to NULL Pointer Dereference | 2026-11-01 | [CVE-2026-76418](https://www.grayhavenindustries.com/watch/CVE-2026-76418) | | 2026-10-28 | Linux Kernel | Missing Initialization of a Variable | 2026-10-31 | [CVE-2026-46300](https://www.grayhavenindustries.com/watch/CVE-2026-46300) | | 2026-10-28 | Broadcom VMware ESX | Insufficient Logging | 2026-11-11 | [CVE-2026-41709](https://www.grayhavenindustries.com/watch/CVE-2026-41709) | | 2026-10-27 | Adobe Commerce and Magento | Unrestricted Upload of File with Dangerous Type | 2026-11-10 | [CVE-2026-48356](https://www.grayhavenindustries.com/watch/CVE-2026-48356) | | 2026-10-27 | Google Brotli | Unchecked Return Value | 2026-11-10 | [CVE-2026-111497](https://www.grayhavenindustries.com/watch/CVE-2026-111497) | | 2026-10-26 | PHP | PHP Stale Internal Request-State | 2026-10-29 | [CVE-2026-109619](https://www.grayhavenindustries.com/watch/CVE-2026-109619) | | 2026-10-26 | PHP | PHP Memory Corruption | 2026-10-29 | [CVE-2026-109618](https://www.grayhavenindustries.com/watch/CVE-2026-109618) | | 2026-10-23 | Arista VeloCloud Orchestrator | SQL Injection | 2026-10-26 | [CVE-2026-114625](https://www.grayhavenindustries.com/watch/CVE-2026-114625) | | 2026-10-23 | Collabora Online โ€“ Built-in CODE Server | Online โ€“ Built-in CODE Server OS Command Injection | 2026-10-26 | [CVE-2026-110447](https://www.grayhavenindustries.com/watch/CVE-2026-110447) | | 2026-10-20 | Plex Media Server | External Control of File Name or Path | 2026-10-23 | [CVE-2026-96656](https://www.grayhavenindustries.com/watch/CVE-2026-96656) | | 2026-10-20 | Plex Media Server | Server-Side Request Forgery (SSRF) | 2026-11-03 | [CVE-2026-96655](https://www.grayhavenindustries.com/watch/CVE-2026-96655) | | 2026-10-20 | Plex Media Server | Improper Neutralization of Encoded URI Schemes in a Web Page | 2026-10-23 | [CVE-2026-96654](https://www.grayhavenindustries.com/watch/CVE-2026-96654) | | 2026-10-20 | Plex Media Server | Server-Side Request Forgery (SSRF) | 2026-11-03 | [CVE-2026-96652](https://www.grayhavenindustries.com/watch/CVE-2026-96652) | | 2026-10-20 | Siemens Software Center | Uncontrolled Search Path Element | 2026-11-03 | [CVE-2026-110936](https://www.grayhavenindustries.com/watch/CVE-2026-110936) | | 2026-10-20 | EG Secure Solutions SiteGuard Server Edition | OS Command Injection | 2026-10-23 | [CVE-2026-106931](https://www.grayhavenindustries.com/watch/CVE-2026-106931) | | 2026-10-16 | BeyondTrust Remote Support | Authentication Bypass by Spoofing | 2026-10-19 | [CVE-2026-102764](https://www.grayhavenindustries.com/watch/CVE-2026-102764) | | 2026-10-16 | Fortinet Multiple Products | Path Traversal | 2026-10-19 | [CVE-2025-61624](https://www.grayhavenindustries.com/watch/CVE-2025-61624) | | 2026-10-15 | Atlassian Multiple Products | Files or Directories Accessible to External Parties | 2026-10-18 | [CVE-2026-21589](https://www.grayhavenindustries.com/watch/CVE-2026-21589) | | 2026-10-14 | Cisco Secure Email Gateway | Relative Path Traversal | 2026-10-17 | [CVE-2026-76519](https://www.grayhavenindustries.com/watch/CVE-2026-76519) | | 2026-10-14 | AhsayCBS | Command Injection | 2026-10-17 | [CVE-2026-105134](https://www.grayhavenindustries.com/watch/CVE-2026-105134) | | 2026-10-14 | AhsayCBS | Improper Authentication | 2026-10-17 | [CVE-2026-105133](https://www.grayhavenindustries.com/watch/CVE-2026-105133) | | 2026-10-14 | Palo Alto Networks PAN-OS | Code Injection | 2026-10-17 | [CVE-2026-0322](https://www.grayhavenindustries.com/watch/CVE-2026-0322) | | 2026-10-13 | Microsoft Windows | Command Injection | 2026-10-16 | [CVE-2026-96951](https://www.grayhavenindustries.com/watch/CVE-2026-96951) | | 2026-10-13 | Ivanti Connect Secure | Authentication Bypass by Spoofing | 2026-10-16 | [CVE-2026-104935](https://www.grayhavenindustries.com/watch/CVE-2026-104935) | | 2026-10-08 | Strapi | Cleartext Storage of Sensitive Information | 2026-10-11 | [CVE-2023-22894](https://www.grayhavenindustries.com/watch/CVE-2023-22894) | | 2026-10-08 | ONLYOFFICE Docs | Server Path Traversal | 2026-10-11 | [CVE-2021-3199](https://www.grayhavenindustries.com/watch/CVE-2021-3199) | | 2026-10-08 | Apache Struts | Command Injection | 2026-10-11 | [CVE-2016-3081](https://www.grayhavenindustries.com/watch/CVE-2016-3081) | | 2026-10-08 | ISC BIND | Data Processing Errors | 2026-10-11 | [CVE-2015-5477](https://www.grayhavenindustries.com/watch/CVE-2015-5477) | | 2026-10-08 | ProFTPD | Improper Access Control | 2026-10-11 | [CVE-2015-3306](https://www.grayhavenindustries.com/watch/CVE-2015-3306) | --- Grayhaven Industries ยท https://www.grayhavenindustries.com/watch