Git Patches Integer Truncation Flaw CVE-2026-111760 Enabling Code Execution via Malicious Submodules in Recursive Clones

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog based on confirmed active exploitation in the wild. The list includes flaws affecting Cisco BroadWorks, multiple Barracuda Networks products, Openwave Messaging Webtop Media Transcoder, Microsoft Office Outlook, and Google Chromium. These vulnerabilities enable attacks such as XML external entity injection, OS command injection, authentication bypass, and use-after-free exploitation. Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize remediation of KEV-listed issues on publicly exposed assets that could grant full system control. CISA encourages all organizations to adopt similar risk-based vulnerability management practices. The agency continues to accept nominations for additional exploited vulnerabilities through its official form.

Microsoft Releases Windows 10 KB5131096 Extended Security Update with November 2026 Patch Tuesday Fixes

Microsoft has released the Windows 10 KB5131096 extended security update, delivering this month's November 2026 Patch Tuesday fixes along with additional bug fixes and changes. The update applies to Windows 10 Enterprise LTSC users and those enrolled in the ESU program, bringing systems to build 19045.7846 for standard Windows 10 and 19044.7846 for Windows 10 Enterprise LTSC 2021. Among the fixes is resolution for an actively exploited Outlook zero-day flaw as part of addressing 1,235 vulnerabilities across Microsoft products. The update also corrects daylight saving time rules for Cuba, resolves printer installation errors in Active Directory environments, and fixes Remote Desktop policy and shadow connection issues on Windows Server 2016 and 2012 R2. Additional changes strengthen PowerShell script signing security through stricter UTF-8 encoding validation and resolve remaining USB Audio Class 1.0 device problems that caused audio failures and Code 10 errors.

SGLang RCE Exploit Breaches NEAR AI Inference Servers, Exposing Data from 18 Agents and 100 Users

An attacker exploited a remote code execution vulnerability in SGLang, an open-source inference engine, to compromise one of NEAR AI's inference servers last Sunday. The intrusion allowed access to requests processed that day, including those handled in confidential mode inside a trusted execution environment. Although the TEE was intended to protect privacy, the flaw in SGLang running inside it enabled the attacker to reach sensitive data. The intruder then moved laterally to an internal system behind the deprecated Private Chat product, downloading account details for roughly 100 users. Eighteen AI agents on an older NEAR AI Agents deployment outside the TEE were also compromised, resulting in the theft of chat histories, settings, and logs. Two NEAR AI Cloud API keys were exposed in logs and subsequently revoked. NEAR AI has since revoked sessions, replaced tokens, deployed a SGLang fix across servers, and completed forensic review while notifying affected users.