Amzu Security Briefing — 2 November 2026

Amzu Information Technology Ltd

Security Briefing

2 November 2026 · Daily edition · Europe/London

DAILY

Forwarded this? Get the briefing yourself: Subscribe

Executive summary

Ivanti Connect Secure, a widely used business VPN, has two more flaws on CISA’s list of actively exploited vulnerabilities as of 30 October. If you use it, installing Ivanti’s October fixes is the one item to act on now. A Linux kernel networking flaw (CVE-2026-98432) now has fixed kernels on Amazon Linux and patched AWS and Vercel platforms, so a kernel update and reboot for servers you run yourself is worth planning this week.

Elsewhere, there are routine dependency updates for widely used libraries: node-forge and follow-redirects for JavaScript, pyasn1, pypdf and OAuthLib for Python, imgproxy for Go and Apache Wicket for Java. AWS published fixes for the Kinesis Producer Library and the Nitro Enclaves SDK, and Microsoft updated Visual Studio. There are no new Next.js, Google Cloud or AI platform advisories.

Not sure if this affects you? Reply to this email and we’ll help.

Worth doing first

A short list of updates that are most useful to schedule soon. Most items are routine maintenance — not an emergency for every business.

Act now Severity: High

Ivanti Connect Secure VPN: install the October fixes (CVE-2026-111357, CVE-2026-118527)

What this means for you

If your organisation uses Ivanti Connect Secure for remote access (a VPN, or virtual private network, that lets staff connect to the office network), attackers have been chaining these flaws with an earlier one to take full control of the device. CISA added both to its list of actively exploited vulnerabilities on 30 October.

What to do

Ask your IT provider to confirm your Ivanti appliance runs 25.1.1.3 or later, or 22.8R2.6 if it cannot move to 25.1 yet. If it was reachable from the internet in October before patching, ask them to check it for signs of misuse as well. If you do not use Ivanti, no action is needed.

For your engineers

CVE-2026-111357: missing authentication allowing privilege escalation to root (NVD CVSS 7.0). CVE-2026-118527: predictable identifiers that let an authenticated user upload files to a known location. Attackers chained both with CVE-2026-104935 (authentication bypass plus code execution, fixed 13 Oct) for unauthenticated root access. Fixed in 25.1.1.3 and 22.8R2.6 (published 29 Oct); 25.1.3.0 and later are reported as not affected. Volexity reports the activity ran in memory and logs were wiped, so the Integrity Checker Tool may show clean; review off-box logs. If compromise is suspected, reset the Active Directory service account used by the appliance and any LAPS and BitLocker secrets it could reach. Added to CISA KEV on 30 Oct 2026 (federal due dates 2 Nov and 13 Nov).

Ivanti advisory · CISA KEV · NVD CVE-2026-111357 · Volexity analysis · CCB Belgium advisory

Plan this week Severity: Critical

Linux servers: schedule the kernel update and reboot (CVE-2026-98432)

What this means for you

A flaw in how Linux handles incoming network connections could let someone on the internet run code on a server you manage. AWS and Vercel have patched their own platforms, and AWS reports no known attacks.

What to do

If you run your own Linux servers or virtual machines, ask your IT provider to install the latest kernel update and reboot this week. Managed services such as Vercel, AWS Lambda and Fargate tasks started after 1 November need nothing from you.

For your engineers

Use-after-free of IP options in the IPv4 TCP handshake path (kernels 4.4 and later); researchers showed remote code execution against hosts with a Multipath TCP listener. AWS bulletin 2026-160 (30 Oct, updated 1 Nov): Amazon Linux 2 and 2023 kernels available (e.g. ALAS2-2026-4065, ALAS2023-2026-3365); locked AL2023 hosts need release 2023.12.20261102 or later; EKS-optimised AL2023 AMIs v20261031; ECS-optimised AMI 20261031; Bottlerocket AMIs from 2 Nov; EKS Auto Mode by 6 Nov. Linux targets behind NLB TCP listeners or Global Accelerator are the most exposed. Ubuntu fixes are still pending. Interim only: net.mptcp.enabled=0 and dropping IPv4 packets with IP options.

AWS bulletin 2026-160 · Vercel bulletin · NVD · Ubuntu status

Plan this week Severity: High

node-forge 1.4.1 fixes certificate and TLS checks (CVE-2026-119190 and others)

What this means for you

node-forge is a widely used JavaScript library for certificates and encryption. Older versions can accept a certificate they should reject, or be slowed to a halt by crafted input. No attacks have been reported.

What to do

Ask your developers to update node-forge to 1.4.1 (it often arrives indirectly through other packages) and redeploy.

For your engineers

Eight advisories for node-forge 1.4.0 and earlier, all fixed in 1.4.1: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs (GHSA-5x38-2vff-x55p); PKCS#12 MAC forgery with zero iteration count (GHSA-jc66-7q78-782g); PEM decoding ReDoS (GHSA-7wch-p9px-956x); two TLS record-processing denial-of-service bugs (GHSA-hqq3-7jhf-c5jx, GHSA-8hrf-8g6f-7xwp); AES-GCM tagLength not validated (GHSA-5cwg-6vw7-rj6p, Medium); plus GHSA-6wvx-3r32-xmcg and GHSA-525v-9gp9-w22h (Medium; CVE-2026-118777, CVE-2026-118778). Find it with npm ls node-forge.

GHSA-5x38-2vff-x55p · GHSA-jc66-7q78-782g · GHSA-7wch-p9px-956x · GHSA-hqq3-7jhf-c5jx

Plan this week Severity: High

pyasn1 0.6.5 closes four slow-down flaws (CVE-2026-119194 and others)

What this means for you

pyasn1 is a Python building block used by many login, certificate and cloud libraries. Crafted data can make an app spend a long time decoding it, which could make a service slow or unavailable (a “denial of service”). No attacks have been reported.

What to do

Ask your developers to update pyasn1 to 0.6.5 in Python apps and container images.

For your engineers

Four quadratic-complexity decoder issues in pyasn1 0.6.4 and earlier: schemaless BER/CER/DER container decoding (GHSA-fm9c-5rcf-2q5p), constructed strings and indefinite-length ANY (GHSA-9m75-vc3g-4x39), constructed BIT STRING (GHSA-2qm8-x737-gmw5) and binary REAL (GHSA-mm57-4v3p-rchx). Usually pulled in by rsa, pyasn1-modules, google-auth or LDAP clients; check with pip show pyasn1 or your lock file.

GHSA-fm9c-5rcf-2q5p · GHSA-9m75-vc3g-4x39 · GHSA-2qm8-x737-gmw5 · GHSA-mm57-4v3p-rchx

Languages

Node.js / JavaScript

Critical

Plan this week Severity: Critical

Signal K server: path traversal can expose its signing secret

What this means for you

Signal K is software used on boats and marine systems. Older versions let someone read files they should not, including a secret that could lead to a full takeover. Only relevant if you run it.

What to do

If you run Signal K, update to 2.34.0.

For your engineers

Path traversal in the resources API can disclose the JWT signing secret, enabling forged tokens and remote code execution. Affects signalk-server 2.0.0 to before 2.34.0 and @signalk/resources-provider before 1.5.3. No CVE assigned yet.

GHSA-4xm8-rg9h-jhq2

High

Plan this week Severity: High

follow-redirects 1.16.2: credentials could follow a redirect to another site

What this means for you

follow-redirects is used by axios and many other web request tools. In two recent versions, login details could be passed on when a request is redirected to a different website.

What to do

Ask your developers to update follow-redirects to 1.16.2.

For your engineers

Affects 1.16.0 to 1.16.1: cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow cross-host redirects. Check with npm ls follow-redirects.

GHSA-mrwp-f3q8-3g9p

Plan this week Severity: High

joi and @hapi/content: crafted input can slow a server

What this means for you

Two popular input-checking libraries can be made to work very slowly on specially shaped input, which could make an app sluggish or unavailable.

What to do

Update joi to 17.13.9 or 18.3.1, and @hapi/content to 6.0.3.

For your engineers

joi: quadratic-time split in string().email({ multiple: true }) (17.1.1 to before 17.13.9; 18.x before 18.3.1; legacy @hapi/joi has no fix). @hapi/content: quadratic Content-Disposition parameter parsing (6.0.2 and earlier; the old content package has no fix).

GHSA-4528-x5fx-h6hg · GHSA-8494-f6mr-cjpv

Plan this week Severity: High

Nx Maven and Gradle plugins: command injection through project settings

What this means for you

Teams using Nx to build Java projects could run unintended commands if someone changes the project’s settings file, for example in a pull request.

What to do

Update the Nx Maven and Gradle plugins to 22.7.9 or 23.1.2.

For your engineers

OS command injection via plugin options in nx.json. Affected @nx/maven 22.0.2 to before 22.7.9 and 23.0.0 to before 23.1.2; @nx/gradle from 21.0.0 (see the advisory for exact ranges). Review CI jobs that run on untrusted pull requests.

GHSA-qm8w-vx34-5j9j

Good to know Severity: High

@sigstore/oci 0.7.2: registry login sent to another host

What this means for you

A library used to sign and publish container images could hand your registry password to a different server during an upload.

What to do

If your build pipeline signs images with Sigstore tooling, update @sigstore/oci to 0.7.2.

For your engineers

The registry Authorization header is sent to a cross-host blob-upload Location. Affects 0.7.1 and earlier.

GHSA-j63v-mwhm-56jx

Medium

Good to know Severity: Medium

Nuxt 4.6.3 fixes server middleware path checks

What this means for you

Sites built with Nuxt 4.6 could let some requests skip the checks your developers placed in server middleware.

What to do

Update nuxt to 4.6.3.

For your engineers

Dot segments in the request path bypass server/middleware path checks and route rules on page routes (GHSA-9v7c-q64q-vv33), plus three related Medium advisories. Affects nuxt and @nuxt/nitro-server 4.6.0 to before 4.6.3.

GHSA-9v7c-q64q-vv33 · GHSA-x287-wcfc-q46c · GHSA-3xf4-9g3c-4h4w · GHSA-648h-gw55-m2g7

Good to know Severity: Medium

minimatch 11.0.1 and glob 14.0.2: file-matching fixes

What this means for you

Two very common file-matching libraries had minor issues that matter mainly if your app takes file patterns from users.

What to do

Pick up minimatch 11.0.1 and glob 14.0.2 in your next routine dependency update.

For your engineers

minimatch before 11.0.1: denial of service via globparts amplification. glob 9.0.0 to 14.0.1: AbortSignal cancellation is not honoured, so traversal continues after a timeout.

GHSA-g3hv-75wg-m249 · GHSA-3g3m-2fjr-6pw4

Python

High

Plan this week Severity: High

OAuthLib 4.0.0 and Authlib 1.9.1: fixes for login and app-registration checks

What this means for you

If your Python app runs its own login service using OAuth (the standard behind “Sign in with…” buttons), one app could be treated as another, or could change another app’s registration.

What to do

If you run an OAuth server in Python, update oauthlib to 4.0.0 and Authlib to 1.9.1. Apps that only sign users in with Google or Microsoft are not affected.

For your engineers

OAuthLib before 4.0.0: token grants can use an attacker-supplied client_id for authorisation after authenticating a different client (4.0.0 is a major release; test before rollout). Authlib 0.15 to 1.9.0: RFC 7592 client-configuration examples omit binding the registration access token to the client.

GHSA-7984-qgvg-3j9c · GHSA-c73q-w75p-j82v

Plan this week Severity: High

pypdf 6.21.4: crafted PDFs can stall processing

What this means for you

If your systems read PDFs that customers upload, a specially made file could tie up the server for a long time.

What to do

Update pypdf to 6.21.4.

For your engineers

Seven advisories: an infinite loop at EOF during trailer search (GHSA-5849-834g-hvw5) and further issues fixed in 6.21.4 (GHSA-cggf-277g-3q54, GHSA-mfr5-77xh-9j7h), plus four long-runtime issues such as page-label retrieval fixed in 6.21.3 (GHSA-42gh-23hr-vphw and others). Consider a time limit on PDF parsing jobs.

GHSA-5849-834g-hvw5 · GHSA-42gh-23hr-vphw · pypdf advisories

Good to know Severity: High

graphql-core 3.3.1 and joserfc 1.7.6: slow-down fixes

What this means for you

Two Python libraries for APIs and encrypted tokens could be pushed into using too much memory or processor time.

What to do

Update graphql-core to 3.3.1 (if on the 3.3 pre-releases) and joserfc to 1.7.6.

For your engineers

graphql-core 3.3.0a3 to before 3.3.1: memory leak in aborted validations. joserfc before 1.7.5: unbounded JWE General JSON recipients array causes repeated RSA decryption (High); 1.7.6 adds a further Medium fix (GHSA-9pg5-8c7x-5hfx).

GHSA-mpqx-q82w-9x46 · GHSA-jpxq-7h8p-2q76 · GHSA-9pg5-8c7x-5hfx

Critical

Plan this week Severity: Critical

imgproxy 4.0.17: crafted icon images can crash or compromise the service

What this means for you

imgproxy resizes images for websites. A specially made icon file could crash it and may allow an attacker to run code (remote code execution).

What to do

If you self-host imgproxy, update to 4.0.17, which covers all three fixes.

For your engineers

ICO loader: integer overflow (GHSA-hff9-5pqw-6w9f, Critical, fixed 4.0.16), out-of-bounds heap read/write in BMP header reconstruction (GHSA-494m-4556-wf5p, fixed 4.0.17) and unbounded allocation (GHSA-mmq5-xm89-9pfg, fixed 4.0.16). No CVEs assigned yet. Interim: restrict source URLs and disallow ICO input.

GHSA-hff9-5pqw-6w9f · GHSA-494m-4556-wf5p · GHSA-mmq5-xm89-9pfg

High

Good to know Severity: High

Kubeflow Pipelines: pod logs readable without permission, and upload memory exhaustion

What this means for you

Teams running Kubeflow for machine-learning pipelines could expose job logs to the wrong users, or have the server run out of memory from a crafted upload.

What to do

If you run Kubeflow Pipelines, move to a current release that includes these fixes.

For your engineers

Run-log endpoint permits unauthorised access to pod logs (GHSA-wg5q-x4j9-qm54); pipeline archive upload allows a decompression bomb (GHSA-8fmv-6rg5-5924). GHSA lists fixed Go pseudo-versions from commits dated 31 Aug 2026 and 4 Sep 2026; 1.7.0-alpha.3 remains affected.

GHSA-wg5q-x4j9-qm54 · GHSA-8fmv-6rg5-5924

Medium

Good to know Severity: Medium

Fiber v2.52.3: CORS wildcard matching fix

What this means for you

Fiber web apps that allow other sites by wildcard (for example *.example.com) could also trust look-alike domains. CORS is the browser rule that decides which other websites may read your app’s responses.

What to do

Update Fiber v2 to 2.52.3.

For your engineers

Wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads. Affects 2.52.1 to 2.52.2.

GHSA-g5jq-qmqr-qrwf

Java · .NET · PHP · Rust · Ruby

High

Plan this week Severity: High

Java: Apache Wicket 8.20.0, 9.25.0 and 10.12.0 fix cross-site scripting and upload issues

What this means for you

Websites built with Apache Wicket could let an attacker inject script into pages (cross-site scripting), or be overwhelmed by oversized uploads.

What to do

Update Wicket to 8.20.0, 9.25.0 or 10.12.0 for your branch. Wicket 7 and older are unsupported.

For your engineers

Three XSS issues: component or markup ids written unescaped into the JavaScript Wicket builds (CVE-2026-95863), ExternalLink on non-anchor tags (CVE-2026-84231) and AjaxNewWindowNotifyingBehavior window name (CVE-2026-82956). Two availability issues in FileUploadToResourceField / AbstractFileUploadResource: client-asserted upload sizes and unenforced upload limits (CVE-2026-83594, CVE-2026-84170; 9.14.0+ and 10.x). CNA scores CVSS 4.0 7.4 to 8.3. Published 1 Nov 2026.

CVE-2026-95863 · Apache announcement · CVE-2026-83594 · CVE-2026-84170

Good to know Severity: High

PHP: AdminNeo 5.5.1 fixes a code execution path

What this means for you

AdminNeo is a web-based database admin tool. A logged-in user could use it to run code on the server.

What to do

If you use AdminNeo, update to 5.5.1 and keep it off the public internet.

For your engineers

ATTACH blocklist bypass via SQLite VACUUM INTO leads to code execution. Fixed in 5.5.1.

GHSA-q5mp-gfjf-cf2j

Good to know Severity: High

Rust: russh 0.65 enforces SSH agent key confirmation

What this means for you

Rust apps that act as an SSH key agent could use a key without asking the user first, even when told to ask.

What to do

Update russh to 0.65.

For your engineers

Agent server never calls Agent::confirm, so keys added with ssh-add -c sign without confirmation. 0.65 also addresses related Medium advisories.

GHSA-vp5q-ff62-jwqv

Medium

Good to know Severity: Medium

Java: MariaDB Connector/J and PHPUnit maintenance fixes

What this means for you

Lower-risk fixes: the MariaDB Java driver mainly matters if it could connect to an untrusted database server, and PHPUnit only on shared build machines.

What to do

Include Connector/J 3.3.7, 3.4.5 or 3.5.11 and PHPUnit 13.4.4 in your next routine update.

For your engineers

Connector/J: four Medium advisories where a rogue server can drive large heap allocations and similar (GHSA-h599-m3w5-9m7x and others). PHPUnit 13.4.0 to before 13.4.4: code execution by other local users via a shared temporary directory in PHPT coverage handling (PHP).

GHSA-h599-m3w5-9m7x · GHSA-9vw2-f4vp-x7gf

Vercel & Next.js

Next.js

No new advisories today. The latest Next.js security release is still the 14 October update; if it is not yet applied, upgrade to next@16.4.1 (or 15.5.28 on 15.x). Next.js advisories

Vercel platform

Good to know Severity: Critical

Vercel has patched its platform for the Linux kernel flaw (CVE-2026-98432)

What this means for you

Builds, functions and sandboxes on Vercel already run the fixed kernel, so your Vercel-hosted sites need nothing.

What to do

No action for Vercel-hosted apps. Patch any Linux servers you run yourself, including back ends your Vercel app calls.

For your engineers

Vercel bulletin (last updated 1 Nov): kernel updates applied across builds, functions, sandboxes, daemons, CI and control-plane systems; no redeploy, restart or configuration change needed. External back ends you manage still need the kernel update and a reboot.

Vercel bulletin

Cloud services

Google Cloud (GCP)

No new advisories today. The most recent Google Cloud bulletin, GCP-2026-074 (28 October), needed no customer action. Google Cloud bulletins

Amazon Web Services (AWS)

Plan this week

Amazon Kinesis Producer Library for Java 1.0.8: credentials could appear in logs

What this means for you

Apps that send data to Kinesis with this library could leave AWS access keys in debug logs or in the server’s process list.

What to do

Ask your developers to update to 1.0.8, then rotate any long-term AWS keys the app used.

For your engineers

Affects com.amazonaws:amazon-kinesis-producer 0.15.12 and earlier, and software.amazon.kinesis:amazon-kinesis-producer before 1.0.8. Credentials are logged at DEBUG and passed to the native child process as command-line arguments. Interim: set the Daemon logger to INFO or above and redact lines starting “Starting Native Process”. Rotate keys, revoke active role sessions where needed, and clean up existing logs.

AWS bulletin 2026-159 · GHSA-mr97-jq69-qr5f

Plan this week

AWS Nitro Enclaves SDK for C v0.4.6: rebuild enclave images

What this means for you

Only relevant if your team builds AWS Nitro Enclaves (isolated compartments for handling secrets). Older SDK versions could let code outside the enclave tamper with it.

What to do

Upgrade to v0.4.6 and rebuild your enclave images. There is no workaround.

For your engineers

CVE-2026-119116: use-after-free in the kmstool-enclave SetClient handler, reachable over vsock from the parent instance (kmstool-enclave or derived code only). CVE-2026-119148: KMS server name built from a caller-supplied region string, allowing KMS impersonation and forged responses. Affects v0.4.5 and earlier.

AWS bulletin 2026-157

Good to know

FreeRTOS-Kernel V11.3.3 for devices using queue sets

What this means for you

Only relevant if you build firmware for small devices on FreeRTOS with memory protection and queue sets turned on.

What to do

Upgrade to V11.3.3, rebuild and reflash affected firmware.

For your engineers

The queue-set selection path does not fully validate that the object is a queue set; on MPU-enabled builds with configUSE_QUEUE_SETS=1 an unprivileged task can cause a privileged out-of-bounds write. Affects V7.4.0 to V11.3.2.

AWS bulletin 2026-158

Microsoft Azure

Plan this week

Visual Studio: certificate validation fix (CVE-2026-118147)

What this means for you

Developers’ copies of Visual Studio could be tricked into trusting a fake server on the network. Microsoft reports no known attacks.

What to do

Ask developers to install the latest Visual Studio update from the Visual Studio Installer.

For your engineers

Microsoft rates it Important, CVSS 7.4; not publicly disclosed or exploited. Fixed builds: 18.11.3 (VS 2026), 17.14.44 (VS 2022), 16.11.62 (VS 2019), 15.9.84 (VS 2017). No new Azure service advisories in this period.

MSRC CVE-2026-118147

Cloudflare

Good to know

Cloudflare adds an optional WAF rule for a Nuxt Image / IPX issue

What this means for you

If your site uses Nuxt Image, Cloudflare has added a protective firewall rule (a WAF, or web application firewall), but it is switched off by default and only partly covers the issue.

What to do

If you use Nuxt Image or IPX, update to the latest release and consider enabling the rule in the Cloudflare Managed Ruleset.

For your engineers

Emergency release 2026-10-30: new Managed Ruleset rule “Nuxt Image / IPX - Explicit GIF or Animation Modifier Exposure”, disabled by default, partial coverage. Cloudflare advises patching to the latest version; no public GitHub advisory was available at the time of writing.

Cloudflare WAF changelog

AI platforms

OpenAI

No new advisories today. Two short, non-security service incidents on 30 October were resolved the same day. OpenAI status

Anthropic

No new advisories today.

SpaceXAI / xAI

No new advisories today.

Google AI

No new advisories today.

Updates now available

Earlier items where a vendor fix is ready to apply when you next plan maintenance.

No new fixes have landed since Friday for the items we are still tracking. Still waiting on: Echo v4 forwarded-IP header handling (move to echo v5.4.1 or set a trusted-proxy IP extractor), Vue I18n 9 and 10 cross-site scripting (fixed only in 11.4.14), go-jose v3 (no fix planned; move to v4.1.6), a2a-go denial of service (no release yet), and Ubuntu kernels for CVE-2026-98432 (Canonical lists them as pending). Vue I18n advisory · go-jose advisory · Ubuntu status

Quick glossary

Denial of service (DoS) — making a service slow or unavailable, usually by overloading it.
Remote code execution (RCE) — a way an attacker could run their own software on a system if it is left unpatched.
CVE — a public ID for a known software vulnerability (for example CVE-2026-111497).
CVSS — a 0–10 score vendors use to describe how serious a vulnerability can be; useful for prioritising, not a panic button.

Know someone who’d find this useful? Forward this email, or share the sign-up link.

From Amzu

Need a second pair of eyes?

Amzu Information Technology Ltd can help you review what matters for your stack, plan updates, and harden GCP, AWS and Azure — without the drama.

Talk to our security team →

Prepared by Amzu Information Technology Ltd for subscribed customers.
Every item links to its original vendor or advisory source.
Questions: cybersecurity@amzuit.com

Disclaimer: The Amzu Security Briefing is provided by Amzu Information Technology Ltd for general information only. It is not professional, legal or security advice, and is not a recommendation to take or avoid any particular action. Content is compiled from public sources (vendor advisories, NVD, CISA and others) which are linked for each item; while we take care to report accurately, we make no warranty as to its completeness, accuracy or timeliness, and advisories may change after publication. Always verify details against the original source and test any update or change before applying it to your systems. Any decisions and their outcomes are your own responsibility, and to the fullest extent permitted by law Amzu Information Technology Ltd accepts no liability for any loss or damage arising from use of or reliance on this information.

We use standard email tracking to see whether this email was opened and which links were clicked. We use this only to improve the briefing, and it is never sold or shared. Unsubscribe anytime using the link below.

Manage or change your edition: amzuit.com/cybersecurity-newsletter