CatalogWhat changed this week
What changed this week
Week: Mon 2 Nov 2026 00:00 SGT to Sun 8 Nov 2026 23:59 SGT.
Verified catalog updates that landed on vuln2shell.com in that window: 10 new pages, plus material updates on existing pages (WordPress Core reached KEV; *sshole, Zyxel GS1900 and Airbyte show Reported exploited).
New pages
- MLflow, CVE-2026-116692, CVE-2026-116690, Exploitation attempts
- TightVNC Viewer pre-auth RCE, no CVE, No known ITW
- WordPress Core upgrade-window RCE, CVE-2026-119977, KEV, Confirmed (CISA added it to KEV on 3 Nov 2026, due 6 Nov; source: CISA KEV catalog, 3 Nov 2026)
- Puppet / OpenVox Server report-deserialization RCE, CVE-2026-115731, No known ITW
- Zyxel GS1900 pre-auth RCE, CVE-2026-107441, Reported exploited
- Airbyte Connector Builder / Manifest Server RCE, no CVE (GHSA-g35w-6r6v-h4r7 / JVN#12040144), Reported exploited
- *sshole / sshhole OpenSSH password bypass, CVE-2026-123158, Reported exploited (moved to Reported exploited on 6 Nov 2026 after a Previdian honeypot report; still not in KEV; source: Help Net Security, 6 Nov 2026)
- Rails Active Storage ImageMagick file write/read, CVE-2026-122006, No known ITW
- Barracuda Email Security Gateway authentication bypass, CVE-2026-116606, No known ITW
- Apache OFBiz pre-auth RCE, CVE-2026-83542, No known ITW
Material updates
- BeyondTrust Remote Support, Rapid7 unauth file-write to RCE analysis and Metasploit PR 22083 indexed as Rapid7's claim (page What changed 2 Nov 2026). Source: Rapid7, 30 Oct 2026.
- GitLab Onigmo, Alpine attempted-exploitation note and Ruby-image caveat; Shadowserver exposure counts; KEV chip moved onto CVE-2026-97229 (updates through 3 Nov 2026). Sources: Alpine Linux, 28 Oct 2026; Shadowserver, 1 Nov 2026; BleepingComputer, 2 Nov 2026; Ruby security note, 23 Oct 2026.
- Node2Shell, Wordfence WordPress pingback lab RCE (isolated lab; public payload not universal; KEV unchanged) (page What changed 3 Nov 2026). Source: Wordfence, 2 Nov 2026.
- Linux kernel TCP use-after-free, badge set to Exploitation attempts after internet-wide scanning report; FortiGuard IPS signature; Ubuntu generic kernels reached -updates (page What changed 7 Nov 2026). Sources: Marcus Hutchins, 3 Nov 2026; FortiGuard Threat Signal 6564, 3 Nov 2026; Ubuntu CVE page, updated 7 Nov 2026.
- Plex2Shell, QNAP App Center notice after reports of apparent NAS compromise; fix 1.43.3.10861 or later (page What changed 7 Nov 2026). Sources: QNAP security notice, 6 Nov 2026; BleepingComputer, 6 Nov 2026.
- PHP2Shell, Hunt.io operator-infrastructure research added to Detection; exploitation status unchanged (page What changed 7 Nov 2026). Source: Hunt.io, 5 Nov 2026.
Site
- Home gained a crawlable All vulnerabilities index and related-vuln links; Needs attention / Reference split and per-page briefing chrome (merged 4-5 Nov 2026 SGT).